EIP-2026-107771

This exploit demonstrates SQL injection and XSS vulnerabilities in IGES CMS <=2.0. The SQLi allows retrieval of admin credentials via union-based injection, while the XSS is a reflected attack in the 'cat' parameter.