EIP-2026-110289

This exploit demonstrates a time-based SQL injection vulnerability in OpenEMR 4.1.0, allowing an attacker to extract usernames and password hashes from the database by leveraging the 'u' parameter in the login validation endpoint.