Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112670. PoCs published by cakes.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Ticket-Booking 1.4 via SQL injection in the login form. The crafted POST request bypasses authentication by manipulating the 'userid' parameter with a SQL payload, allowing unauthorized access to cancel booked seats.
Description
Ticket-Booking 1.4 - Authentication Bypass
Exploits (1)
This exploit demonstrates an authentication bypass vulnerability in Ticket-Booking 1.4 via SQL injection in the login form. The crafted POST request bypasses authentication by manipulating the 'userid' parameter with a SQL payload, allowing unauthorized access to cancel booked seats.