EIP-2026-112547

The exploit demonstrates an SQL injection vulnerability in the tadbook2 module for XOOPS by injecting a UNION-based SQL query to retrieve the database version. The attack leverages unsanitized user input in the 'book_sn' parameter.