Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-106654. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in e107 by injecting malicious SQL queries via URL parameters. It targets the 'download.php' and 'wmessage.php' endpoints, allowing attackers to extract sensitive data or manipulate the database.
Description
e107 0.7.23 - Multiple SQL Injections
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/34653
The exploit demonstrates SQL injection vulnerabilities in e107 by injecting malicious SQL queries via URL parameters. It targets the 'download.php' and 'wmessage.php' endpoints, allowing attackers to extract sensitive data or manipulate the database.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
e107 0.7.23
No auth needed
Prerequisites:
Access to the target URL
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026