EIP-2026-111124

This exploit leverages a SQL injection vulnerability in PhpLive versions 4.4.8 to 4.5.4, specifically in the password recovery process. It bypasses authentication by injecting a UNION-based SQL query to reset passwords and retrieve usernames for both admin and operator accounts.