EIP-2026-106334

PRE-CVE

dacio's CMS 1.08 - Cross-Site Scripting / SQL Injection / File Disclosure

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106334. PoCs published by Mehmet Ince.

AI-analyzed exploit summary The exploit demonstrates SQL injection and XSS vulnerabilities in Dacio's PHP scripts CMS v1.08. It provides specific payloads for extracting user credentials and executing arbitrary JavaScript.

Description

dacio's CMS 1.08 - Cross-Site Scripting / SQL Injection / File Disclosure

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mehmet Ince · textwebappsphp

https://www.exploit-db.com/exploits/8042

View Code ZIP pw:eip

The exploit demonstrates SQL injection and XSS vulnerabilities in Dacio's PHP scripts CMS v1.08. It provides specific payloads for extracting user credentials and executing arbitrary JavaScript.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Dacio's PHP scripts CMS v1.08

No auth needed

Prerequisites: Access to the target web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026