EIP-2026-112076

The exploit demonstrates an authentication bypass vulnerability in Simple CMS by manipulating the 'loggedin' parameter in the URL. The vulnerable code in auth.php fails to properly validate the session state, allowing unauthorized access to admin pages.