EIP-2026-105772

This exploit demonstrates an SQL injection vulnerability in the 'user_email' parameter of Cemetry Mapping and Information System 1.0, allowing authentication bypass via a classic SQLi payload. The vulnerable code in '/include/accounts.php' fails to sanitize user input, enabling attackers to bypass login with a crafted username.