EIP-2026-110177

This exploit demonstrates a SQL injection vulnerability in the 'email' parameter of the forgot-password.php page in Online Shopping Portal 3.1. The PoC uses a crafted payload to change all user passwords by injecting a tautology (' or '1'='1'#) into the SQL query.