EIP-2026-113007

The exploit demonstrates a SQL injection vulnerability in the vBulletin Verify Email Before Registration plugin, specifically in the register_form_complete hook. The PoC shows how an attacker can inject a UNION-based SQL query to extract user credentials (username, password, salt) from the database.