EIP-2026-109681

This exploit demonstrates an SQL injection vulnerability in MyBB 1.0 via cookie manipulation. The crafted cookie bypasses authentication by injecting a UNION SELECT query to elevate privileges to admin (usergroup 4).