EIP-2026-104451

This exploit demonstrates a time-based SQL injection vulnerability in Spotweb 1.4.9 via the 'search[tree]' parameter. The payload uses a SLEEP function to confirm the vulnerability by delaying the response.