EIP-2026-107508

This exploit demonstrates a time-based blind SQL injection vulnerability in Groomify v1.0 via the 'search' parameter in the blog-search endpoint. The payload uses a SLEEP function to confirm the vulnerability, indicating a MySQL backend.