Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100426. PoCs published by Dcrab.
AI-analyzed exploit summary The provided text describes a remote SQL injection vulnerability in MetaCart2 due to improper input sanitization. It includes example URLs demonstrating how an attacker can inject malicious SQL queries via the 'curCatalogID' parameter.
Description
MetaCart2 - 'CurCatalogID' SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Dcrab · textwebappsasp
https://www.exploit-db.com/exploits/25541
The provided text describes a remote SQL injection vulnerability in MetaCart2 due to improper input sanitization. It includes example URLs demonstrating how an attacker can inject malicious SQL queries via the 'curCatalogID' parameter.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
MetaCart2
No auth needed
Prerequisites:
Access to the vulnerable endpoint
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026