EIP-2026-111941

This is a technical writeup describing a SQL injection vulnerability in Schools Alert Management System version 2.01, allowing an attacker to bypass authentication by injecting a malicious SQL query into the login page. The proof of concept demonstrates how to exploit the vulnerability by setting the username and password to 'admin' or 1=1 -- -.