Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100446. PoCs published by Bl@ckbe@rD.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in MVC-Web CMS versions 1.0 and 1.2. It provides a direct URL-based payload to extract user credentials from the database via a crafted 'newsid' parameter.
Description
MVC-Web CMS 1.0/1.2 - 'newsid' SQL Injection
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Bl@ckbe@rD · textwebappsasp
https://www.exploit-db.com/exploits/5912
This exploit demonstrates a SQL injection vulnerability in MVC-Web CMS versions 1.0 and 1.2. It provides a direct URL-based payload to extract user credentials from the database via a crafted 'newsid' parameter.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
MVC-Web CMS 1.0 and 1.2
No auth needed
Prerequisites:
Target must be running MVC-Web CMS 1.0 or 1.2 · The 'newsid' parameter must be accessible via URL
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026