EIP-2026-112803

The exploit demonstrates a SQL injection vulnerability in ttCMS/ttForum's Instant-Messages script. By injecting arbitrary SQL into the Ignorelist-Textfield, an attacker can manipulate the database query to escalate privileges (e.g., setting memberGroup to 'Administrator').