Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100458. PoCs published by Jim Pangalos.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in NEXTWEB (i)Site, where unsanitized input in the login form allows bypassing authentication by injecting a tautology into the password field. No actual exploit code is present, only a description and example payload.
Description
NEXTWEB (i)Site - 'login.asp' SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Jim Pangalos · textwebappsasp
https://www.exploit-db.com/exploits/25781
The provided text describes an SQL injection vulnerability in NEXTWEB (i)Site, where unsanitized input in the login form allows bypassing authentication by injecting a tautology into the password field. No actual exploit code is present, only a description and example payload.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
NEXTWEB (i)Site
No auth needed
Prerequisites:
Access to the login page of the vulnerable application
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026