EIP-2026-105814

The exploit demonstrates multiple vulnerabilities in Charity Management System CMS 1.0, including unauthenticated reflected XSS, authenticated stored XSS, POST/GET authenticated SQL injection, unauthenticated SQL injection, and PHP code injection leading to RCE. The PoC includes detailed steps and payloads for each vulnerability.