EIP-2026-107578

This exploit demonstrates a SQL injection vulnerability in Helpdesk Pilot Knowledge Base software (version 4.4.0 or lower) via the 'article_id' parameter. The PoC uses a UNION-based SQLi to extract staff usernames and passwords from the 'hdp_staff' table.