EIP-2026-112254

This is a detailed technical analysis of a SQL injection vulnerability in SMF (Simple Machines Forum) versions up to 2.0.1, leveraging a PHP Zend_Hash_Del_Key_Or_Index vulnerability in older PHP versions. The writeup explains the root cause, patch bypass techniques, and proof-of-concept steps.