CVE-2021-43650

This exploit demonstrates a SQL injection vulnerability in Webrun 3.6.0.42 via the P_0 parameter during login. The payload manipulates the input to trigger an error message containing a specific string ('qvvxq1qbzbq'), confirming successful exploitation.

This repository contains a proof-of-concept for CVE-2021-43650, demonstrating a SQL Injection vulnerability in Webrun <= 3.6.0.42. The exploit targets the login process by injecting a payload into the POST parameter P_1, resulting in a PostgreSQL error that confirms the vulnerability.