EIP-2026-113050

The exploit demonstrates a SQL injection vulnerability in VehicleWorkshop 1.0 via the 'bookingid' parameter in viewtestdrive.php. The vulnerable code directly interpolates user input into SQL queries without sanitization, allowing arbitrary SQL command execution.