EIP-2026-119306

The exploit demonstrates an SQL injection vulnerability in XAMPP for Windows by injecting a malicious SQL condition into the 'id' parameter of the phonebook.php script. This allows an attacker to manipulate the SQL query and potentially access or modify data in the underlying database.