EIP-2026-100215
PRE-CVECodefixer Membership - Remote Database Disclosure
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100215. PoCs published by ViRuSMaN.
AI-analyzed exploit summary This is a writeup describing an information disclosure vulnerability in Codefixer Membership, an ASP-based membership management system. The vulnerability allows unauthenticated access to the database file via a direct URL.
Description
Codefixer Membership - Remote Database Disclosure
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by ViRuSMaN · textwebappsasp
https://www.exploit-db.com/exploits/10482
This is a writeup describing an information disclosure vulnerability in Codefixer Membership, an ASP-based membership management system. The vulnerability allows unauthenticated access to the database file via a direct URL.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
Codefixer Membership (version not specified)
No auth needed
Prerequisites:
Target must have the vulnerable Codefixer Membership script installed · Database file must be accessible via direct URL
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026