EIP-2026-112490

This is a writeup detailing a SQL injection vulnerability in Supernews <= 2.6.1, specifically in the 'noticias.php' file. The vulnerability arises from an insufficient input sanitization function that can be bypassed using obfuscated SQL keywords.