EIP-2026-113272

The exploit demonstrates SQL injection in webERP's WorkOrderEntry.php via the WO parameter, including both time-based blind and error-based techniques. It provides functional HTTP requests with payloads that trigger the vulnerability.