EIP-2026-100429

PRE-CVE

MetaCart2 - 'StrSubCatalogID' SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100429. PoCs published by Dcrab.

AI-analyzed exploit summary The provided text describes a remote SQL injection vulnerability in MetaCart2, where user-supplied input is not properly sanitized before being included in SQL queries. It includes example URLs demonstrating how an attacker could exploit this vulnerability to manipulate SQL queries.

Description

MetaCart2 - 'StrSubCatalogID' SQL Injection

Exploits (1)

exploitdb WRITEUP VERIFIED
by Dcrab · textwebappsasp
https://www.exploit-db.com/exploits/25540

The provided text describes a remote SQL injection vulnerability in MetaCart2, where user-supplied input is not properly sanitized before being included in SQL queries. It includes example URLs demonstrating how an attacker could exploit this vulnerability to manipulate SQL queries.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: MetaCart2
No auth needed
Prerequisites: Access to the vulnerable application URL
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026