EIP-2026-109607

The exploit demonstrates two vulnerabilities in MRCGIGUY FreeTicket: insecure cookie handling allowing admin session hijacking via JavaScript and a SQL injection in the 'id' parameter of admin.php. Both are functional PoCs with clear exploitation steps.