EIP-2026-112928

This exploit demonstrates a SQL injection vulnerability in User Registration & Login and User Management System 2.1, allowing an attacker to extract admin credentials via UNION-based SQLi in the 'uid' parameter of update-profile.php.