EIP-2026-107367

This PHP script exploits a SQL injection vulnerability in Geeklog <= 1.5.2 via the `savepreferences()` function, specifically targeting the `blocks[]` parameter. It extracts admin hashes by leveraging blind SQL injection techniques and requires a valid user account.