EIP-2026-100363

PRE-CVE

IBM ENOVIA SmarTeam - 'LoginPage.aspx' Cross-Site Scripting

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100363. PoCs published by Lament.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in IBM ENOVIA SmarTeam due to improper input sanitization. The PoC shows how an attacker can inject arbitrary JavaScript code via the 'errMsg' parameter in the login page URL.

Description

IBM ENOVIA SmarTeam - 'LoginPage.aspx' Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC VERIFIED

by Lament · textwebappsasp

https://www.exploit-db.com/exploits/33728

View Code ZIP pw:eip

This exploit demonstrates a cross-site scripting (XSS) vulnerability in IBM ENOVIA SmarTeam due to improper input sanitization. The PoC shows how an attacker can inject arbitrary JavaScript code via the 'errMsg' parameter in the login page URL.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: IBM ENOVIA SmarTeam

No auth needed

Prerequisites: Access to the target application's login page

MITRE ATT&CK

T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026