EIP-2026-105322

The writeup describes an SQL injection vulnerability in AutoRank PHP <= 2.0.4, where malicious input in user, password, email, or username fields can bypass authentication and expose plaintext passwords. The affected file is accounts.php.