EIP-2026-105558

This exploit targets an SQL injection vulnerability in BlueCMS v1.6 sp1 by injecting malicious SQL via the X-Forwarded-For header. It extracts admin credentials by manipulating the database query and retrieving the results through a subsequent request.