EIP-2026-100564

PRE-CVE

Snitz Forums 2000 - 'register.asp' SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100564. PoCs published by sharpiemarker.

AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in Snitz Forums 2000's register.asp script, allowing remote command execution via the `xp_cmdshell` function in Microsoft SQL Server. The exploit sends a crafted POST request to execute arbitrary commands.

Description

Snitz Forums 2000 - 'register.asp' SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED
by sharpiemarker · perlwebappsasp
https://www.exploit-db.com/exploits/22583

This Perl script exploits a SQL injection vulnerability in Snitz Forums 2000's register.asp script, allowing remote command execution via the `xp_cmdshell` function in Microsoft SQL Server. The exploit sends a crafted POST request to execute arbitrary commands.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Snitz Forums 2000 (3.3.03 and possibly others)
No auth needed
Prerequisites: Target must be using Microsoft SQL Server as the backend database · xp_cmdshell must be enabled
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026