EIP-2026-112403

The exploit demonstrates a SQL injection vulnerability in SquareCMS 0.3.1's post.php, where the 'id' parameter is directly used in a MySQL query without sanitization. This allows an attacker to extract sensitive data such as usernames and passwords from the database.