EIP-2026-112499

This exploit demonstrates a SQL injection vulnerability in Media Entertainment Script 1.0, allowing an attacker to perform a UNION-based SQLi to read local files via the `load_file` function. The vulnerable parameter is `id` in the `view.php` file.