EIP-2026-113213

The exploit demonstrates an SQL injection vulnerability in Web Cocoon simpleCMS by injecting a malicious payload into the 'id' parameter of a GET request. The payload uses a UNION-based SQLi to extract username and password from the 'user' table.