EIP-2026-113951

This exploit demonstrates a SQL injection vulnerability in WP Photo Album Plus <= 4.1.1 via the 'wppa-album' parameter, allowing an attacker to inject malicious SQL queries. The PoC uses a time-based blind SQL injection technique with BENCHMARK and MD5 functions to verify the vulnerability.