EIP-2026-112837

The exploit demonstrates a SQL injection vulnerability in the Typo3 'cmw_linklist' extension by injecting malicious SQL queries via the 'category_uid' parameter. The provided URLs show how an attacker can extract sensitive data such as usernames from the database.