EIP-2026-105825

This Hybris script exploits a blind SQL injection vulnerability in ChillyCMS 1.1.2 by brute-forcing the admin username and password hash via time-based or boolean-based techniques. It iterates through characters and checks responses to reconstruct credentials.