EIP-2026-105596

This exploit demonstrates an SQL injection vulnerability in Boonex Dolphin 6.1 via the 'iIDcat' parameter in the 'get_list.php' endpoint. The payload uses a time-based blind SQLi technique to extract admin passwords from the database.