EIP-2026-105114

This PHP script exploits an SQL injection vulnerability in Almnzm software to extract admin credentials (username and password hash) by crafting a malicious HTTP request with a manipulated cookie. It then generates an admin session cookie for authentication bypass.