EIP-2026-106360
PRE-CVEDataface 1.0 - 'admin.php' Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106360. PoCs published by MustLive.
AI-analyzed exploit summary The exploit demonstrates a reflected XSS vulnerability in Dataface 1.0 by injecting a malicious script via the `-search` parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.
Description
Dataface 1.0 - 'admin.php' Cross-Site Scripting
Exploits (1)
The exploit demonstrates a reflected XSS vulnerability in Dataface 1.0 by injecting a malicious script via the `-search` parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.