EIP-2026-108268

This PHP script exploits a blind SQL injection vulnerability in the 'com_aprice' component to extract usernames and passwords from the 'jos_users' table. It uses time-based inference by comparing response lengths to determine character values.