EIP-2026-106417
PRE-CVEDental Clinic Appointment Reservation System 1.0 - 'date' UNION based SQL Injection (Authenticated)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106417. PoCs published by Mesut Cetin.
AI-analyzed exploit summary This exploit demonstrates a UNION-based SQL injection vulnerability in the 'date' POST parameter of the Dental Clinic Appointment Reservation System 1.0. The payload retrieves sensitive data such as usernames, passwords, and database versions from the 'users' table.
Description
Dental Clinic Appointment Reservation System 1.0 - 'date' UNION based SQL Injection (Authenticated)
Exploits (1)
This exploit demonstrates a UNION-based SQL injection vulnerability in the 'date' POST parameter of the Dental Clinic Appointment Reservation System 1.0. The payload retrieves sensitive data such as usernames, passwords, and database versions from the 'users' table.