EIP-2026-106893

PRE-CVE

Entry Level Content Management System (EL CMS) - SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106893. PoCs published by vir0e5.

AI-analyzed exploit summary This exploit demonstrates SQL injection in Entry Level Content Management System (EL CMS) via the 'subj' parameter. It uses schemafuzz.py to enumerate database structure and dump user credentials.

Description

Entry Level Content Management System (EL CMS) - SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED
by vir0e5 · pythonwebappsphp
https://www.exploit-db.com/exploits/12667

This exploit demonstrates SQL injection in Entry Level Content Management System (EL CMS) via the 'subj' parameter. It uses schemafuzz.py to enumerate database structure and dump user credentials.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: Entry Level Content Management System (EL CMS)
No auth needed
Prerequisites: Access to vulnerable EL CMS instance · Python environment with schemafuzz.py
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026