EIP-2026-107257

This exploit demonstrates SQL injection and XSS vulnerabilities in the FriendsInWar FAQ Manager login page. The SQLi allows authentication bypass using a trivial payload, while the XSS payload is injected into the login form.