EIP-2026-112768

The exploit demonstrates an authentication bypass via SQL injection and a reflected XSS vulnerability in the Tradingeye CMS admin panel. The SQLi allows bypassing login with a trivial payload, while the XSS exploits an unfiltered search field.