EIP-2026-107621

This exploit demonstrates an SQL injection vulnerability in the Hospital Management System 4.0 admin panel, allowing authentication bypass and password change for the admin user. The PoC uses a simple SQLi payload to bypass login and then changes the admin password.