EIP-2026-100168

PRE-CVE

Black Knight Forum 4.0 - 'forum.asp' SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100168. PoCs published by Dcrab.

AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in Black Knight Forum, where unsanitized user input in the 'forum' parameter can be exploited to manipulate SQL queries. No actual exploit code is present, only a description and example URL.

Description

Black Knight Forum 4.0 - 'forum.asp' SQL Injection

Exploits (1)

exploitdb WRITEUP VERIFIED

by Dcrab · textwebappsasp

https://www.exploit-db.com/exploits/25505

View Code ZIP pw:eip

The provided text describes an SQL injection vulnerability in Black Knight Forum, where unsanitized user input in the 'forum' parameter can be exploited to manipulate SQL queries. No actual exploit code is present, only a description and example URL.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Theoretical

Target: Black Knight Forum (version unspecified)

No auth needed

Prerequisites: Access to the vulnerable forum endpoint

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026