EIP-2026-112314

The exploit demonstrates an SQL injection vulnerability in ECW Shop by manipulating the 'min' and 'max' parameters in a search query. The lack of input sanitization allows attackers to inject malicious SQL code, potentially leading to unauthorized data access or manipulation.