EIP-2026-112279

This exploit demonstrates an SQL injection vulnerability in SnowFlake CMS 1.0 beta5.2 by injecting a UNION-based SQL query to extract database version and name. The PoC uses a crafted URL to exploit insufficient input sanitization in the 'uid' parameter.