Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-105568. PoCs published by Lostmon.
AI-analyzed exploit summary The exploit demonstrates a cross-site scripting (XSS) vulnerability in BMForum due to improper input sanitization. The provided URL shows how an attacker can inject arbitrary script code via the 'forumid' parameter.
Description
BMForum 3.0 - 'post.php' Cross-Site Scripting
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Lostmon · textwebappsphp
https://www.exploit-db.com/exploits/26041
The exploit demonstrates a cross-site scripting (XSS) vulnerability in BMForum due to improper input sanitization. The provided URL shows how an attacker can inject arbitrary script code via the 'forumid' parameter.
Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
BMForum
No auth needed
Prerequisites:
Access to the vulnerable BMForum instance
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026