EIP-2026-105790

PRE-CVE

Cetera eCommerce - Multiple Cross-Site Scripting / SQL Injections

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105790. PoCs published by MustLive.

AI-analyzed exploit summary The exploit demonstrates multiple XSS and SQL injection vulnerabilities in Cetera eCommerce versions 15.0 and prior. It includes functional payloads for both attack types, leveraging unsanitized user input in URL paths.

Description

Cetera eCommerce - Multiple Cross-Site Scripting / SQL Injections

Exploits (1)

exploitdb WORKING POC VERIFIED
by MustLive · textwebappsphp
https://www.exploit-db.com/exploits/35508

The exploit demonstrates multiple XSS and SQL injection vulnerabilities in Cetera eCommerce versions 15.0 and prior. It includes functional payloads for both attack types, leveraging unsanitized user input in URL paths.

Classification
Working Poc 90%
Attack Type
Xss | Sqli
Complexity
Trivial
Reliability
Reliable
Target: Cetera eCommerce <= 15.0
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026