EIP-2026-112726

The exploit demonstrates SQL injection vulnerabilities in TLM CMS 1.1 by injecting malicious SQL queries via the 'ID' and 'idnews' parameters. It retrieves sensitive user data (passwords, usernames, emails) from the 'pphp_user' table.