EIP-2026-105137

PRE-CVE

Alstrasoft Video Share Enterprise 4.72 - SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105137. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in AlstraSoft Video Share Enterprise v4.72. It provides specific URLs with injectable parameters (UID, urlkey, gid, chid) that can be manipulated to execute arbitrary SQL queries.

Description

Alstrasoft Video Share Enterprise 4.72 - SQL Injection

Exploits (1)

exploitdb WORKING POC

by Ihsan Sencan · textwebappsphp

https://www.exploit-db.com/exploits/41244

View Code ZIP pw:eip

This exploit demonstrates SQL injection vulnerabilities in AlstraSoft Video Share Enterprise v4.72. It provides specific URLs with injectable parameters (UID, urlkey, gid, chid) that can be manipulated to execute arbitrary SQL queries.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: AlstraSoft Video Share Enterprise v4.72

No auth needed

Prerequisites: Access to the target web application · Knowledge of SQL injection techniques

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026