EIP-2026-113220

This PHP script demonstrates a SQL injection vulnerability in the 'dns_dhcp Web Interface' by exploiting the unsanitized 'net' parameter in the dns.php script. It exfiltrates MySQL host, user, and password information via a crafted POST request.