EIP-2026-112396

The exploit demonstrates an SQL injection vulnerability in SpitFire Photo Pro by injecting a malicious SQL query via the 'pageId' parameter. The payload uses a UNION-based attack to extract database version, name, and user information.