EIP-2026-109241

This exploit demonstrates blind SQL injection in Magento eCommerce CE v2.3.5-p2 via two endpoints, using time-based techniques to extract database information. The PoC includes crafted requests that trigger conditional delays based on database content.