Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100427. PoCs published by Dcrab.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in MetaCart2, detailing how unsanitized user input in the 'intCatalogID' parameter can be exploited to manipulate SQL queries. It includes example URLs demonstrating the vulnerability but lacks actual exploit code.
Description
MetaCart2 - 'IntCatalogID' SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Dcrab · textwebappsasp
https://www.exploit-db.com/exploits/25539
The provided text describes a SQL injection vulnerability in MetaCart2, detailing how unsanitized user input in the 'intCatalogID' parameter can be exploited to manipulate SQL queries. It includes example URLs demonstrating the vulnerability but lacks actual exploit code.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
MetaCart2
No auth needed
Prerequisites:
Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026