EIP-2026-112450

This writeup describes an SQL injection authentication bypass vulnerability in the Student Information System (SIS) version 0.1. The exploit demonstrates how to bypass authentication by injecting SQL code into the username field.