EIP-2026-100325

This exploit demonstrates multiple vulnerabilities in Ferdows CMS Pro <=1.1.0, including blind SQL injection in 'siteid' and 'sid' parameters, and reflected XSS in 'dataid' parameter. The PoC provides specific URLs and payloads to exploit these flaws.