EIP-2026-111308

This exploit demonstrates an SQL injection vulnerability in Pixie CMS 1.04 by manipulating the GLOBALS[pixie_user] parameter in a login form. The PoC shows how an attacker can inject arbitrary SQL code to potentially compromise the application or underlying database.