EIP-2026-106764

This exploit demonstrates an SQL injection vulnerability in ECShop by manipulating the 'filter_attr' parameter to inject malicious SQL queries. The provided URIs show how an attacker can use boolean-based blind SQL injection to infer information about the database.