EIP-2026-100613

PRE-CVE

Web Sihirbazi 5.1.1 - 'default.asp' Multiple SQL Injections

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100613. PoCs published by bypass.

AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in Web Sihirbazi 5.1.1 by injecting malicious SQL queries via the 'id' and 'pageid' parameters. The PoC extracts user credentials from the 'user' table using UNION-based SQLi.

Description

Web Sihirbazi 5.1.1 - 'default.asp' Multiple SQL Injections

Exploits (1)

exploitdb WORKING POC VERIFIED

by bypass · textwebappsasp

https://www.exploit-db.com/exploits/30938

View Code ZIP pw:eip

This exploit demonstrates SQL injection vulnerabilities in Web Sihirbazi 5.1.1 by injecting malicious SQL queries via the 'id' and 'pageid' parameters. The PoC extracts user credentials from the 'user' table using UNION-based SQLi.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Web Sihirbazi 5.1.1

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026