EIP-2026-112033

This exploit demonstrates a blind SQL injection vulnerability in ShoreTel Connect ONSITE's authenticate.php via the 'username' POST parameter. The PoC includes a Burp Suite request and sqlmap command to confirm the vulnerability and extract database information.