EIP-2026-114152

The exploit demonstrates a SQL injection vulnerability in UPM Polls <= 1.0.3 by injecting a UNION-based payload into the 'qid' parameter, bypassing the Referer check to extract the database version.