EIP-2026-109208

This PHP script exploits a blind SQL injection vulnerability in Lore CMS version 1.5.6 by leveraging the 'article.php?id=' parameter and the 'Add Comment' feature. It automates the extraction of usernames and passwords from the 'lore_users' table using time-based blind SQLi techniques.