EIP-2026-112408

This document describes a blind SQL injection vulnerability in Squirrelcart PRO 3.0.0, where the 'prod_rn' parameter in 'index.php' is not properly sanitized when 'add_to_cart' is set. The analysis includes a sample exploit URL demonstrating the vulnerability.