EIP-2026-112455

This is a functional SQL injection exploit targeting the 'cid' parameter in Student Record System 1.0. The PoC demonstrates a UNION-based SQLi attack that retrieves data from the database via a crafted GET request.