EIP-2026-114656

This exploit demonstrates an authentication bypass via SQL injection in ZykeCMS v1.1. The vulnerable code in `functions.php` directly interpolates user input into an SQL query without sanitization, allowing an attacker to bypass authentication using a crafted payload.