EIP-2026-109905

The exploit demonstrates an SQL injection vulnerability in New5starRating 1.0 by injecting a malicious payload into the username field, bypassing authentication. The payload 'admin 'or' 1=1' manipulates the SQL query to return all records, effectively bypassing login restrictions.