EIP-2026-113176

This exploit demonstrates multiple SQL injection vulnerabilities in the 'start', 'end', 'title', 'description', and 'color' POST parameters of the FullCalendar-BS4-PHP-MySQL-JSON application. It includes payloads for boolean-based blind, error-based, and time-based blind SQL injection techniques.