EIP-2026-114477

This exploit demonstrates a SQL injection vulnerability in the XOOPS module wfdownloads. It injects a UNION-based SQL query to extract usernames and password hashes from the xoops_users table.