Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-105605. PoCs published by cdx.security.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Pixie, where user-supplied input in the 'path' parameter of 'list.php' is not properly sanitized. This could allow an attacker to manipulate SQL queries, potentially leading to unauthorized data access or modification.
Description
BoutikOne - 'list.php?path' SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by cdx.security · textwebappsphp
https://www.exploit-db.com/exploits/35452
The provided text describes a SQL injection vulnerability in Pixie, where user-supplied input in the 'path' parameter of 'list.php' is not properly sanitized. This could allow an attacker to manipulate SQL queries, potentially leading to unauthorized data access or modification.
Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
Pixie (version not specified)
No auth needed
Prerequisites:
Access to the vulnerable 'list.php' endpoint
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026