EIP-2026-106238

PRE-CVE

Crime records Management System 1.0 - 'Multiple' SQL Injection (Authenticated)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106238. PoCs published by Davide Taraschi.

AI-analyzed exploit summary This is a technical writeup detailing SQL injection vulnerabilities in Crime Records Management System 1.0, including vulnerable parameters, exploitation steps via sqlmap, and remediation advice. It includes a PoC request demonstrating time-based blind SQLi.

Description

Crime records Management System 1.0 - 'Multiple' SQL Injection (Authenticated)

Exploits (1)

exploitdb WRITEUP
by Davide Taraschi · textwebappsphp
https://www.exploit-db.com/exploits/50213

This is a technical writeup detailing SQL injection vulnerabilities in Crime Records Management System 1.0, including vulnerable parameters, exploitation steps via sqlmap, and remediation advice. It includes a PoC request demonstrating time-based blind SQLi.

Classification
Writeup 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: Crime Records Management System 1.0
Auth required
Prerequisites: Authenticated session (PHPSESSID cookie) · Access to vulnerable endpoint
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026