EIP-2026-100100

PRE-CVE

Acuity CMS 2.7.1 - SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100100. PoCs published by L0rd CrusAd3r.

AI-analyzed exploit summary This is a writeup describing an SQL injection vulnerability in Acuity CMS version 2.7.1. The vulnerability is located in the 'page' parameter of the 'article.asp' file, allowing attackers to inject malicious SQL queries.

Description

Acuity CMS 2.7.1 - SQL Injection

Exploits (1)

exploitdb WRITEUP VERIFIED
by L0rd CrusAd3r · textwebappsasp
https://www.exploit-db.com/exploits/13885

This is a writeup describing an SQL injection vulnerability in Acuity CMS version 2.7.1. The vulnerability is located in the 'page' parameter of the 'article.asp' file, allowing attackers to inject malicious SQL queries.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Acuity CMS 2.7.1
No auth needed
Prerequisites: Access to the vulnerable 'article.asp' endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026