EIP-2026-114479

This exploit demonstrates an SQL injection vulnerability in XOOPS Recette 2.2. The PoC uses a crafted URL to extract user credentials (uname, pass) from the xoops_users table via a UNION-based SQLi attack.