EIP-2026-108033

This exploit demonstrates a blind SQL injection vulnerability in jakCMS <= v2.01 RC1 by manipulating the 'JAK_COOKIE_NAME' and 'JAK_COOKIE_PASS' cookie parameters. It extracts database information, administrative credentials, and MySQL user hashes through time-based blind SQLi techniques.