EIP-2026-107354

The advisory details SQL injection and XSS vulnerabilities in GAzie 5.10 via the 'Login' parameter in 'login_admin.php'. It includes proof-of-concept payloads for SQLi (including blind SQLi with timing) and XSS, along with error messages confirming exploitation.