EIP-2026-106062

This exploit demonstrates an SQL injection vulnerability in College-Management-System 1.2, allowing authentication bypass by injecting a tautology (' or 0=0 #) into the emailid parameter. The payload bypasses login checks, granting access as the principal.