EIP-2026-106061

This exploit demonstrates a SQL injection vulnerability in College Notes Management System 1.0 via the 'user' parameter in login.php. The payload bypasses authentication and extracts database information (user, database name, version) through a time-based blind SQLi technique.