EIP-2026-112135

This exploit demonstrates SQL injection vulnerabilities in Simple POS and Inventory 1.0 via the 'cat' and 'id' parameters in plist.php and search_result.php, respectively. The payload extracts database schema information using a time-based SQLi technique.