EIP-2026-111391

This exploit demonstrates a SQL injection vulnerability in the 'username' parameter of the Point of Sales 1.0 application. The payload uses a time-based blind SQL injection technique to confirm the vulnerability by delaying the response.