EIP-2026-100500

PRE-CVE

Proje ASP Portal 2.0 - 'id' Multiple SQL Injections

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100500. PoCs published by Ugurcan Engin.

AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in Proje ASP Portal 2.0.0 by providing multiple crafted URLs that extract user credentials (kadi, sifre) from the 'uyeler' table via UNION-based SQLi.

Description

Proje ASP Portal 2.0 - 'id' Multiple SQL Injections

Exploits (1)

exploitdb WORKING POC VERIFIED

by Ugurcan Engin · textwebappsasp

https://www.exploit-db.com/exploits/31860

View Code ZIP pw:eip

The exploit demonstrates SQL injection vulnerabilities in Proje ASP Portal 2.0.0 by providing multiple crafted URLs that extract user credentials (kadi, sifre) from the 'uyeler' table via UNION-based SQLi.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Proje ASP Portal 2.0.0

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026