EIP-2026-112230

This exploit demonstrates SQL injection vulnerabilities in Smart Magician Blog 1.0 by injecting malicious SQL queries via the 'ids' parameter in the 'book.php' script. The PoC includes a UNION-based SQLi example and an admin bypass payload.