EIP-2026-105890

PRE-CVE

Classified Ads Script PHP - 'admin.php' Multiple SQL Injections

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105890. PoCs published by snup.

AI-analyzed exploit summary The document describes SQL injection vulnerabilities in Classified Ads Script PHP 1.1, detailing multiple attack vectors via unsanitized input in the 'orderType' and 'orderBy' parameters. It provides specific exploit URLs but lacks functional exploit code.

Description

Classified Ads Script PHP - 'admin.php' Multiple SQL Injections

Exploits (1)

exploitdb WRITEUP VERIFIED
by snup · textwebappsphp
https://www.exploit-db.com/exploits/37479

The document describes SQL injection vulnerabilities in Classified Ads Script PHP 1.1, detailing multiple attack vectors via unsanitized input in the 'orderType' and 'orderBy' parameters. It provides specific exploit URLs but lacks functional exploit code.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Classified Ads Script PHP 1.1
No auth needed
Prerequisites: Access to the vulnerable admin.php endpoint
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026