Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100183. PoCs published by Dcrab.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in CartWIZ, where the 'idProduct' parameter in the 'addToCart.asp' endpoint is not properly sanitized. This allows attackers to inject malicious SQL queries, potentially leading to data disclosure or modification.
Description
CartWIZ 1.10 - 'AddToCart.asp' SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Dcrab · textwebappsasp
https://www.exploit-db.com/exploits/25506
The provided text describes an SQL injection vulnerability in CartWIZ, where the 'idProduct' parameter in the 'addToCart.asp' endpoint is not properly sanitized. This allows attackers to inject malicious SQL queries, potentially leading to data disclosure or modification.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
CartWIZ (version not specified)
No auth needed
Prerequisites:
Access to the vulnerable endpoint · Basic knowledge of SQL injection techniques
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026