EIP-2026-106978

PRE-CVE

eXtreme Message Board 1.9.11 - Multiple Cross-Site Request Forgery Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106978. PoCs published by 10n1z3d.

AI-analyzed exploit summary This is a proof-of-concept for multiple CSRF vulnerabilities in eXtreme Message Board 1.9.11, allowing an attacker to change the admin password, clear control panel logs, or log out the administrator via crafted HTML forms or image tags.

Description

eXtreme Message Board 1.9.11 - Multiple Cross-Site Request Forgery Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by 10n1z3d · htmlwebappsphp
https://www.exploit-db.com/exploits/14364

This is a proof-of-concept for multiple CSRF vulnerabilities in eXtreme Message Board 1.9.11, allowing an attacker to change the admin password, clear control panel logs, or log out the administrator via crafted HTML forms or image tags.

Classification
Working Poc 100%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: eXtreme Message Board 1.9.11
No auth needed
Prerequisites: Victim must be authenticated as an administrator · Victim must visit a malicious page or click a malicious link
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026