EIP-2026-112398

This advisory details a SQL injection vulnerability in Sports Accelerator Suite v2.0, where the 'news_id' parameter in 'show_news.php' fails to sanitize user input, allowing attackers to execute arbitrary SQL queries. The document includes proof of vulnerability, affected versions, and exploitation vectors.