EIP-2026-106199

PRE-CVE

COVID19 Testing Management System 1.0 - 'searchdata' SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106199. PoCs published by Ashish Upsham.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the COVID19 Testing Management System 1.0 via the 'searchdata' parameter, allowing unauthenticated users to execute system commands and achieve remote code execution (RCE) using sqlmap.

Description

COVID19 Testing Management System 1.0 - 'searchdata' SQL Injection

Exploits (1)

exploitdb WORKING POC

by Ashish Upsham · textwebappsphp

https://www.exploit-db.com/exploits/50190

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in the COVID19 Testing Management System 1.0 via the 'searchdata' parameter, allowing unauthenticated users to execute system commands and achieve remote code execution (RCE) using sqlmap.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: COVID19 Testing Management System 1.0

No auth needed

Prerequisites: Access to the target application's patient-search-report.php page

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026