EIP-2026-112436

This exploit demonstrates a blind SQL injection vulnerability in Stock Management System 1.0 via the 'user_id' parameter in '/stock/php_action/changePassword.php'. It includes SQLmap commands for exploitation and a CSRF/XSS chaining technique to steal session cookies.