EIP-2026-106293

This exploit demonstrates an authentication bypass via SQL injection in Customer Support System 1.0. The malicious POST request manipulates the 'username' parameter to bypass authentication by injecting a tautology (' or 1=1 or ''=').