Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100577. PoCs published by Gyrniff.
AI-analyzed exploit summary The exploit describes an HTML injection vulnerability in Synkron.web's search script due to insufficient input sanitization. Attackers can inject malicious HTML or script code, which may be echoed back to users viewing cached search pages, potentially leading to cookie-based credential theft.
Description
Synkron.Web 3.0 - HTML Injection
Exploits (1)
The exploit describes an HTML injection vulnerability in Synkron.web's search script due to insufficient input sanitization. Attackers can inject malicious HTML or script code, which may be echoed back to users viewing cached search pages, potentially leading to cookie-based credential theft.