EIP-2026-112899

This exploit demonstrates a SQL injection vulnerability in Unified Office Total Connect Now 1.0 via the 'data' parameter in a POST request to operatorLogin.php. The payload extracts the MySQL version by triggering a duplicate key error, confirming the vulnerability.