EIP-2026-106480

PRE-CVE

DMXReady Account List Manager 1.2 - SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106480. PoCs published by Bellatrix.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in DMXReady Account List Manager v1.2. The vulnerability is triggered via the 'AccountID' parameter in the 'update.asp' page, allowing an attacker to inject malicious SQL queries.

Description

DMXReady Account List Manager 1.2 - SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED

by Bellatrix · textwebappsphp

https://www.exploit-db.com/exploits/17483

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in DMXReady Account List Manager v1.2. The vulnerability is triggered via the 'AccountID' parameter in the 'update.asp' page, allowing an attacker to inject malicious SQL queries.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: DMXReady Account List Manager v1.2

No auth needed

Prerequisites: Access to the target URL path

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026