EIP-2026-112646

This exploit demonstrates a SQL injection vulnerability in TheBlog <= 2.0, specifically targeting the 'id' parameter in index.php. It extracts MySQL user information, version details, and user credentials (including hashed passwords) from the database.