EIP-2026-110077

This exploit demonstrates a blind boolean-based SQL injection vulnerability in Online Course Registration 1.0, allowing an authenticated attacker to extract admin credentials (username and MD5 password hash) via brute-force character extraction.