EIP-2026-112866

This advisory details a time-based SQL injection vulnerability in UliCMS <= v9.8.1, specifically in the 'country_blacklist' parameter of the admin spam filter page. It includes a proof-of-concept using SQLMap and technical details about the exploitation method.