EIP-2026-100475

PRE-CVE

PD9 Software MegaBBS 2.0/2.1 - 'ladder-log.asp' Multiple SQL Injections

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100475. PoCs published by pigrelax.

AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in MegaBBS versions 2.0 and 2.1, with example URLs demonstrating unsanitized input. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.

Description

PD9 Software MegaBBS 2.0/2.1 - 'ladder-log.asp' Multiple SQL Injections

Exploits (1)

exploitdb WRITEUP VERIFIED

by pigrelax · textwebappsasp

https://www.exploit-db.com/exploits/24632

View Code ZIP pw:eip

The provided text describes SQL injection vulnerabilities in MegaBBS versions 2.0 and 2.1, with example URLs demonstrating unsanitized input. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Theoretical

Target: MegaBBS 2.0, 2.1

No auth needed

Prerequisites: Access to the vulnerable MegaBBS application

MITRE ATT&CK

T1105 - Ingress Tool Transfer T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026