EIP-2026-105117

PRE-CVE

almond Classifieds ads - Blind SQL Injection / Cross-Site Scripting

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105117. PoCs published by Moudi.

AI-analyzed exploit summary The exploit demonstrates a blind SQL injection and XSS vulnerability in Almond Classifieds Ads Enterprise. It provides live examples of crafted URLs to exploit these vulnerabilities, confirming their existence and functionality.

Description

almond Classifieds ads - Blind SQL Injection / Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC VERIFIED

by Moudi · textwebappsphp

https://www.exploit-db.com/exploits/9259

View Code ZIP pw:eip

The exploit demonstrates a blind SQL injection and XSS vulnerability in Almond Classifieds Ads Enterprise. It provides live examples of crafted URLs to exploit these vulnerabilities, confirming their existence and functionality.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Almond Classifieds Ads Enterprise

No auth needed

Prerequisites: Access to the target web application

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026