EIP-2026-111794

This exploit demonstrates an SQL injection vulnerability in RoseOnlineCMS <= 3 B1, allowing authentication bypass via a crafted username input. The PoC includes a form and PHP code to exploit the vulnerability when magic_quotes_gpc is disabled.