EIP-2026-107302

This exploit demonstrates a blind SQL injection vulnerability in Fuel CMS 1.4.13 via the 'col' parameter in the activity log feature. The PoC uses a time-based payload to confirm the vulnerability by inducing delays in the response.