EIP-2026-113076

This exploit demonstrates a SQL Injection vulnerability in Victor CMS 1.0 via the 'cat_id' parameter in category.php. The provided payload retrieves the MySQL version and database name by leveraging a UNION-based SQLi attack.