EIP-2026-105952

PRE-CVE

CLONEBID B2B Marketplace - Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105952. PoCs published by Hamza 'MizoZ' N..

AI-analyzed exploit summary This exploit demonstrates SQL injection and XSS vulnerabilities in CLONEBID B2B Marketplace. The SQLi is in the 'cid' parameter of selloffers.php, while the XSS is in the 'errmsg' parameter of gen_confirm.php.

Description

CLONEBID B2B Marketplace - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by Hamza 'MizoZ' N. · textwebappsphp

https://www.exploit-db.com/exploits/11162

View Code ZIP pw:eip

This exploit demonstrates SQL injection and XSS vulnerabilities in CLONEBID B2B Marketplace. The SQLi is in the 'cid' parameter of selloffers.php, while the XSS is in the 'errmsg' parameter of gen_confirm.php.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: CLONEBID B2B Marketplace

No auth needed

Prerequisites: access to the vulnerable web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026