EIP-2026-106712
PRE-CVEEasyedit CMS - 'page.php?intPageID' SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106712. PoCs published by d3v1l.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Easyedit by injecting a UNION-based query to extract database version, name, and user information. The PoC leverages unsanitized input in the 'intPageID' parameter to execute arbitrary SQL commands.
Description
Easyedit CMS - 'page.php?intPageID' SQL Injection
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by d3v1l · textwebappsphp
https://www.exploit-db.com/exploits/32593
This exploit demonstrates a SQL injection vulnerability in Easyedit by injecting a UNION-based query to extract database version, name, and user information. The PoC leverages unsanitized input in the 'intPageID' parameter to execute arbitrary SQL commands.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
Easyedit (version unspecified)
No auth needed
Prerequisites:
Access to the vulnerable Easyedit application · Network connectivity to the target
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026