EIP-2026-106332

The exploit demonstrates two vulnerabilities in d.net CMS: an arbitrary re-installation flaw allowing admin account creation and a blind SQL injection via the 'page' parameter in index.php. The SQLi exploit uses time-based techniques to extract admin credentials.