Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100448. PoCs published by Over_G.
AI-analyzed exploit summary This is a writeup describing a cross-site scripting (XSS) vulnerability in MyGuestBK Information Server. The vulnerability allows remote attackers to inject malicious script code via the 'Add Entry' page, potentially leading to cookie theft or other client-side attacks.
Description
MyGuestBK - 'Add.asp' Cross-Site Scripting
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Over_G · textwebappsasp
https://www.exploit-db.com/exploits/22436
This is a writeup describing a cross-site scripting (XSS) vulnerability in MyGuestBK Information Server. The vulnerability allows remote attackers to inject malicious script code via the 'Add Entry' page, potentially leading to cookie theft or other client-side attacks.
Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
MyGuestBK Information Server
No auth needed
Prerequisites:
Access to the vulnerable 'Add Entry' page
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026