EIP-2026-105037

The exploit demonstrates a blind SQL injection vulnerability in AirStar Airbnb Clone Script v1.0 via the 'room_id' parameter. The PoC URL includes a boolean-based blind SQLi payload that can be used to extract data from the database.