EIP-2026-111224

This exploit demonstrates a SQL injection vulnerability in phptpoint Pharmacy Management System 1.0, allowing an attacker to bypass authentication by injecting a malicious payload into the 'username' parameter. The payload 'admin' OR 1 -- bypasses the login mechanism by ensuring the SQL query always evaluates to true.