EIP-2026-114396

The exploit demonstrates SQL injection and HTML injection vulnerabilities in WX-Guestbook 1.1.208. The provided payload extracts database version, user, and database name via a UNION-based SQLi attack.