EIP-2026-106450

PRE-CVE

Digital Scribe 1.4.1 - Multiple SQL Injections

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106450. PoCs published by Salvatore Fresta.

AI-analyzed exploit summary This document details multiple SQL injection vulnerabilities in Digital Scribe 1.4.1, including vulnerable code snippets, exploitation examples, and mitigation techniques. It provides a technical analysis of the issue, focusing on the `stuworkdisplay.php` endpoint and the impact of PHP's Magic Quotes setting.

Description

Digital Scribe 1.4.1 - Multiple SQL Injections

Exploits (1)

exploitdb WRITEUP VERIFIED
by Salvatore Fresta · textwebappsphp
https://www.exploit-db.com/exploits/10383

This document details multiple SQL injection vulnerabilities in Digital Scribe 1.4.1, including vulnerable code snippets, exploitation examples, and mitigation techniques. It provides a technical analysis of the issue, focusing on the `stuworkdisplay.php` endpoint and the impact of PHP's Magic Quotes setting.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Digital Scribe 1.4.1
No auth needed
Prerequisites: Magic Quotes GPC must be disabled in php.ini (except for one vulnerability)
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026