EIP-2026-113346

The exploit demonstrates an SQL injection vulnerability in Webscene eCommerce's productlist.php by injecting a UNION-based query to extract admin credentials. The payload concatenates loginid and password from the adminuser table, confirming the vulnerability.