EIP-2026-112806

The exploit demonstrates an authentication bypass vulnerability in Tugux CMS 1.0_final by adding a Super Admin account via an unauthenticated POST request to 'create_admin_parse.php'. It also mentions an SQL injection vulnerability in 'latest.php'.