EIP-2026-111898

This exploit demonstrates an authentication bypass and arbitrary file upload vulnerability in SASPCMS 0.9. It uses SQL injection to bypass admin authentication and then uploads a file via FCKEditor.