EIP-2026-102512

This PHP script exploits a SQL injection vulnerability in Nortel Contact Recording Centralized Archive 6.5.1 via the EyrAPIConfiguration web service's getSubKeys() method. It sends a crafted SOAP request to execute arbitrary SQL commands, potentially leading to remote code execution via xp_cmdshell.