EIP-2026-105705

The advisory details stored XSS and SQL injection vulnerabilities in Cannonbolt Portfolio Manager v1.0, specifically in the 'cname' POST parameter and 'cdel' GET parameter. It provides technical details on how these vulnerabilities can be exploited but does not include functional exploit code.