EIP-2026-106935

This exploit demonstrates an authentication bypass via SQL injection and achieves remote code execution by uploading a malicious PHP shell. It targets a vulnerable Event Registration System with QR Code 1.0.