EIP-2026-112632

The exploit demonstrates a SQL injection vulnerability in 'The Company Business Website CMS' via the 'user_name' POST parameter in the login form, allowing authentication bypass and potential data extraction. It also includes a simple authentication bypass technique using tautological SQL conditions.