EIP-2026-112765

This exploit demonstrates an SQL injection vulnerability in TR News <= 2.1's login.php, allowing authentication bypass via a crafted username input. The PoC sends a malicious POST request with SQLi payload to bypass login checks.