🎯 Blind SQL injection

The items that name it 2

• Metasploit Wrap Up: This One Goes to Sixteen!
  article2026-09-11

  Exploited via SPIP's date column escaping logic bypass

• How Hacked Construction Apps Are Bringing Down Jobsite Security
  writeup2026-01-21

  Exploitation of CVE-2025-51683 via POST /Default.aspx/update_profile_Server query observed in IIS web server logs, leading to enabling of xp_cmdshell on the MSSQL instance