EIP-2026-100428

PRE-CVE

MetaCart2 - 'SearchAction.asp' Multiple SQL Injections

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100428. PoCs published by Dcrab.

AI-analyzed exploit summary The provided code demonstrates SQL injection vulnerabilities in MetaCart2 by injecting malicious input into multiple parameters of the searchAction.asp page. The URLs show how an attacker can manipulate SQL queries to extract sensitive data or corrupt the database.

Description

MetaCart2 - 'SearchAction.asp' Multiple SQL Injections

Exploits (1)

exploitdb WORKING POC VERIFIED
by Dcrab · textwebappsasp
https://www.exploit-db.com/exploits/25543

The provided code demonstrates SQL injection vulnerabilities in MetaCart2 by injecting malicious input into multiple parameters of the searchAction.asp page. The URLs show how an attacker can manipulate SQL queries to extract sensitive data or corrupt the database.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: MetaCart2
No auth needed
Prerequisites: Access to the vulnerable MetaCart2 application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026