EIP-2026-100108

The exploit demonstrates an SQL injection vulnerability in AppIntellect SpotLight CRM's login.asp page. By injecting malicious SQL queries into the UserName field, an attacker can manipulate the database, such as resetting passwords or usernames.