EIP-2026-114599

The exploit demonstrates a SQL injection vulnerability in Zen Time Tracking 2.2 via the managerlogin.php endpoint. It uses a trivial authentication bypass payload (' or' 1=1) to bypass login credentials.