EIP-2026-105004

This exploit demonstrates an unauthenticated SQL injection vulnerability in Aero CMS v0.0.1 via the 'search' parameter in search.php. The PoC includes payloads to trigger errors and extract admin credentials from the database.