EIP-2026-100237

This exploit leverages a SQL injection vulnerability in Dana Portal's ASP version to extract admin credentials (username, password hash, salt, and user code) and then updates the admin password to a known value ('hacked'). It requires external ASP files to generate the new password hash.