EIP-2026-110791

This exploit demonstrates a blind SQL injection vulnerability in PHP Weby directory software version 1.2 via the contact.php file, allowing unauthorized database queries. It also includes a CSRF exploit to change admin credentials.