EIP-2026-108026

The exploit demonstrates two vulnerabilities in iy10 Dizin Scripti: a CSRF attack to change admin passwords and an SQL injection for authentication bypass. The CSRF exploit uses a crafted HTML form to submit a password change request, while the SQL injection leverages a classic 'or' 1=1' bypass.