This exploit demonstrates a SQL injection vulnerability in PTCEvolution 5.50 via the 'id' parameter in the 'product' and 'products' views. The PoC includes a crafted SQL payload to extract table and column names from the database.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:PTCEvolution 5.50
No auth needed
Prerequisites:Access to the vulnerable web application