EIP-2026-105584

PRE-CVE

Bonza Digital Cart Script - SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105584. PoCs published by Eyup CELIK.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Bonzo Cart's searchresults.php via the 'ord1' parameter. The provided URL example shows how an attacker can inject malicious SQL queries to manipulate the database.

Description

Bonza Digital Cart Script - SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED
by Eyup CELIK · textwebappsphp
https://www.exploit-db.com/exploits/17709

This exploit demonstrates a SQL injection vulnerability in Bonzo Cart's searchresults.php via the 'ord1' parameter. The provided URL example shows how an attacker can inject malicious SQL queries to manipulate the database.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Bonzo Cart (All Versions)
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026