EIP-2026-103258
PRE-CVEAlerton Webtalk 2.5/3.3 - Multiple Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103258. PoCs published by David Tomaschik.
AI-analyzed exploit summary This exploit demonstrates an information leakage vulnerability in Alerton Webtalk software, where unauthenticated users can access password hashes stored in an SQLite database via a predictable path derived from the configuration file. The script automates the retrieval and parsing of the configuration file and the subsequent extraction of user credentials from the database.
Description
Alerton Webtalk 2.5/3.3 - Multiple Vulnerabilities
Exploits (1)
This exploit demonstrates an information leakage vulnerability in Alerton Webtalk software, where unauthenticated users can access password hashes stored in an SQLite database via a predictable path derived from the configuration file. The script automates the retrieval and parsing of the configuration file and the subsequent extraction of user credentials from the database.