EIP-2026-119447

This exploit demonstrates a blind SQL injection vulnerability in TripSpark VEO Transportation software via the 'editOEN' parameter. The PoC uses a crafted POST request to trigger a DNS/HTTP request via 'xp_dirtree', potentially capturing NetNTLMv2 hashes.