EIP-2026-114746

This exploit demonstrates a SQL injection vulnerability in Client Management System 1.1 via the 'search invoices' field in the admin panel. The payload ' OR 'x'='x bypasses authentication and retrieves all records, confirming the vulnerability.