Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-106050. PoCs published by Curesec Research Team.
AI-analyzed exploit summary This document details two SQL injection vulnerabilities in CodoForum 3.3.1, including a blind SQLi in the page routing mechanism and an authenticated SQLi in the mass email feature. It provides proof-of-concept URLs, affected code snippets, and mitigation steps.
Description
CodoForum 3.3.1 - Multiple SQL Injections
Exploits (1)
exploitdb
WRITEUP
by Curesec Research Team · textwebappsphp
https://www.exploit-db.com/exploits/37820
This document details two SQL injection vulnerabilities in CodoForum 3.3.1, including a blind SQLi in the page routing mechanism and an authenticated SQLi in the mass email feature. It provides proof-of-concept URLs, affected code snippets, and mitigation steps.
Classification
Writeup 100%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target:
CodoForum 3.3.1
No auth needed
Prerequisites:
Network access to the target application · For the second vulnerability, valid authentication credentials
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026