EIP-2026-113533

This exploit demonstrates a SQL injection vulnerability in the WordPress Plugin Adicon Server 1.2. The vulnerability occurs in the 'addIcon.php' file where the 'selectedPlace' POST parameter is used in a SQL query without proper sanitization, allowing for time-based blind SQL injection.