EIP-2026-112529

The exploit demonstrates an SQL injection vulnerability in Synergy Software by injecting a UNION-based query to extract user credentials (login names and passwords) from the database. The attack leverages improper input sanitization in the 'id' parameter of the 'courses.php' endpoint.