EIP-2026-111201

This exploit demonstrates an SQL injection vulnerability in phpSFP (Schedule Facebook Posts) versions 1.5.6 and 1.4.1. The flaw exists in the 'remember me' functionality, where the 'login' cookie is improperly sanitized, allowing error-based SQL injection to extract user credentials.