EIP-2026-107699

This writeup describes an authentication bypass and XSS vulnerability in i-Net Online Community site script. The authentication bypass uses SQL injection with ' or 1=1 or ''=' in login and password fields, while the XSS exploit uses a script tag in the search_user.php parameter.