EIP-2026-106932

PRE-CVE

Event Calender PHP - Multiple Input Validation Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106932. PoCs published by snup.

AI-analyzed exploit summary The exploit demonstrates SQL injection and XSS vulnerabilities in Event Calendar PHP 1.2. It includes multiple crafted URLs targeting different parameters to exploit input validation flaws.

Description

Event Calender PHP - Multiple Input Validation Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by snup · textwebappsphp

https://www.exploit-db.com/exploits/37503

View Code ZIP pw:eip

The exploit demonstrates SQL injection and XSS vulnerabilities in Event Calendar PHP 1.2. It includes multiple crafted URLs targeting different parameters to exploit input validation flaws.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Event Calendar PHP 1.2

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026