EIP-2026-105877

PRE-CVE

ClanTiger 1.1.1 - Authentication Bypass

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105877. PoCs published by YEnH4ckEr.

AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in ClanTiger CMS version 1.1.1 (and earlier) that allows authentication bypass by injecting malicious SQL into the login form's email field. The vulnerability arises due to improper sanitization of user input in the authenticate function.

Description

ClanTiger 1.1.1 - Authentication Bypass

Exploits (1)

exploitdb WORKING POC VERIFIED
by YEnH4ckEr · textwebappsphp
https://www.exploit-db.com/exploits/8472

This exploit demonstrates an SQL injection vulnerability in ClanTiger CMS version 1.1.1 (and earlier) that allows authentication bypass by injecting malicious SQL into the login form's email field. The vulnerability arises due to improper sanitization of user input in the authenticate function.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: ClanTiger CMS 1.1.1 and earlier
No auth needed
Prerequisites: gpc_magic_quotes=off · access to the login form
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026