EIP-2026-100190
PRE-CVECartWIZ 1.10 - 'searchresults.asp' idcategory Argument SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100190. PoCs published by Dcrab.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in CartWIZ, where user-supplied input in the 'idCategory' parameter is not properly sanitized. The example URL demonstrates how an attacker could inject malicious SQL queries to compromise the application or underlying database.
Description
CartWIZ 1.10 - 'searchresults.asp' idcategory Argument SQL Injection
Exploits (1)
The provided text describes an SQL injection vulnerability in CartWIZ, where user-supplied input in the 'idCategory' parameter is not properly sanitized. The example URL demonstrates how an attacker could inject malicious SQL queries to compromise the application or underlying database.