EIP-2026-105425

This PHP script exploits a blind SQL injection vulnerability in bbScript <= 1.1.2.1 by brute-forcing the password hash of a specified user via substring comparisons. It uses file_get_contents to send crafted SQL queries and checks for error responses to infer correct characters.