EIP-2026-106562

PRE-CVE

DPScms - 'q' SQL Injection / Cross-Site Scripting

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106562. PoCs published by Ariko-Security.

AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in DPScms due to insufficient input sanitization. It includes example URIs demonstrating the vulnerabilities but lacks functional exploit code.

Description

DPScms - 'q' SQL Injection / Cross-Site Scripting

Exploits (1)

exploitdb WRITEUP VERIFIED

by Ariko-Security · textwebappsphp

https://www.exploit-db.com/exploits/34232

View Code ZIP pw:eip

The provided text describes SQL injection and XSS vulnerabilities in DPScms due to insufficient input sanitization. It includes example URIs demonstrating the vulnerabilities but lacks functional exploit code.

Classification

Writeup 80%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Theoretical

Target: DPScms (version unspecified)

No auth needed

Prerequisites: Access to the vulnerable application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026