EIP-2026-113280

The exploit demonstrates a SQL injection vulnerability in WebFileExplorer by providing a crafted input for the username field ('admin' or '1=1') that bypasses authentication. This allows an attacker to log in without valid credentials by manipulating the SQL query.