EIP-2026-111573

This exploit demonstrates a SQL injection vulnerability in PTCPay GEN4's buyupg.php script, allowing an attacker to extract admin credentials via a crafted UNION-based SQLi payload. The exploit requires prior registration on the target site.