EIP-2026-100169

PRE-CVE

Black Knight Forum 4.0 - 'Member.asp' SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100169. PoCs published by Dcrab.

AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in Black Knight Forum, where user-supplied input is not properly sanitized before being used in SQL queries. The example demonstrates how an attacker could exploit this by injecting SQL commands via the 'id' parameter in the URL.

Description

Black Knight Forum 4.0 - 'Member.asp' SQL Injection

Exploits (1)

exploitdb WRITEUP VERIFIED
by Dcrab · textwebappsasp
https://www.exploit-db.com/exploits/25504

The provided text describes an SQL injection vulnerability in Black Knight Forum, where user-supplied input is not properly sanitized before being used in SQL queries. The example demonstrates how an attacker could exploit this by injecting SQL commands via the 'id' parameter in the URL.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Black Knight Forum (version unspecified)
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026