EIP-2026-105331

This exploit demonstrates a blind SQL injection vulnerability in AVE.CMS versions <= 2.09. It extracts database information, table prefixes, and user credentials by leveraging time-based blind SQLi techniques.