EIP-2026-114718

The exploit demonstrates an SQL injection vulnerability in Active News Manager's 'login.asp' script. By injecting a crafted payload (' or ''=') into the password field, an attacker can bypass authentication and gain unauthorized access.