EIP-2026-112876

This exploit demonstrates an SQL injection vulnerability in Ultimate Locator by injecting a UNION-based query to extract usernames and passwords from the 'login' table. The payload is appended to the 'radius' parameter in a URL, bypassing input sanitization.