EIP-2026-110112

This exploit demonstrates a blind SQL injection vulnerability in Online Hotel Booking In PHP 1.0, allowing unauthenticated extraction of the admin password via time-based techniques. It uses a character-by-character brute-force approach with sleep-based payloads.