EIP-2026-105211

The exploit demonstrates a blind SQL injection vulnerability in Aprox CMS Engine V6 due to unsanitized user input in the login parameter. It also includes a path disclosure vulnerability triggered by a malformed query.