EIP-2026-105543

The document describes multiple vulnerabilities in bloofoxCMS 0.3, including SQL injection via the 'username' parameter, authentication bypass in 'class_permissions.php', and directory traversal via the 'file' parameter in 'file.php'. It provides technical details and example payloads for exploitation.