EIP-2026-109375

This exploit demonstrates an SQL injection vulnerability in Mcard Mobile Card Selling Platform version 1, allowing an attacker to bypass admin panel authentication by injecting a malicious SQL query into the username field.