EIP-2026-106529

PRE-CVE

Dolphin 7.0.4 - Multiple Cross-Site Scripting Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106529. PoCs published by AutoSec Tools.

AI-analyzed exploit summary This exploit demonstrates multiple XSS vulnerabilities in Dolphin 7.0.4 by injecting arbitrary JavaScript via unsanitized input parameters in specific URLs. The PoC includes example payloads for two vulnerable endpoints.

Description

Dolphin 7.0.4 - Multiple Cross-Site Scripting Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by AutoSec Tools · textwebappsphp

https://www.exploit-db.com/exploits/35332

View Code ZIP pw:eip

This exploit demonstrates multiple XSS vulnerabilities in Dolphin 7.0.4 by injecting arbitrary JavaScript via unsanitized input parameters in specific URLs. The PoC includes example payloads for two vulnerable endpoints.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Dolphin 7.0.4

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026