Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100485. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in Pilot Cart version 7.2, where the 'srch' parameter in 'pilot.asp' is not properly sanitized. The advisory lacks exploit code but provides technical details about the vulnerability and its potential impact.
Description
Pilot Cart 7.2 - 'Pilot.asp' SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by laurent gaffie · textwebappsasp
https://www.exploit-db.com/exploits/29013
The provided text describes an SQL injection vulnerability in Pilot Cart version 7.2, where the 'srch' parameter in 'pilot.asp' is not properly sanitized. The advisory lacks exploit code but provides technical details about the vulnerability and its potential impact.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
Pilot Cart 7.2
No auth needed
Prerequisites:
Access to the vulnerable 'pilot.asp' endpoint
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026