EIP-2026-108969

The exploit demonstrates blind SQL injection vulnerabilities in Karenderia CMS 5.3 via the 'street-name' and 'category' parameters. It uses time-based payloads (SLEEP) to confirm the vulnerability, indicating a functional proof-of-concept for SQLi.