EIP-2026-107353

This exploit demonstrates a SQL injection vulnerability in Ananta Gazelle CMS 1.0, allowing an attacker to update the admin username and password by manipulating the POST data in the forgot.php page. The exploit leverages the lack of input validation to execute arbitrary SQL UPDATE statements.