EIP-2026-107369

This exploit targets an SQL injection vulnerability in Geeklog 1.5.2 and earlier, allowing an attacker to extract the admin password hash by manipulating the 'blocks' parameter in usersettings.php. The PoC automates the extraction of the MD5 hash through a blind SQLi technique.