EIP-2026-110751

This exploit demonstrates an SQL injection authentication bypass and a reflected XSS vulnerability in PHP Restaurants 1.0. The SQLi allows bypassing login via a classic ' OR 1=1 -- payload, while the XSS is triggered via unfiltered input in the search parameter.