EIP-2026-111213

This exploit demonstrates a SQL injection vulnerability in Php-Stats <= 0.1.9.1b by manipulating the PC-REMOTE-ADDR HTTP header to extract the admin password from the database. The PoC sends crafted HTTP requests to exploit the vulnerability and retrieve the password.