EIP-2026-112846

This Perl script exploits a SQL injection vulnerability in UBB.Threads 6.2.* to 6.3.* by brute-forcing user credentials (login name and password hash) via a time-based blind SQLi technique. It leverages the 'like' parameter in showmembers.php to extract data character-by-character.