EIP-2026-110118

This exploit demonstrates an SQL injection vulnerability in the admin login functionality of Online Hotel Reservation System 1.0, allowing authentication bypass via a crafted email parameter. The payload uses a classic SQLi technique ('admin' or 1=1 --) to bypass authentication.