Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-106997. PoCs published by Milos Zivanovic.
AI-analyzed exploit summary The exploit demonstrates CSRF vulnerabilities in Ez Guestbook 1.0, allowing unauthorized password changes and post deletion via crafted HTTP requests. It includes functional HTML forms and URLs to trigger these actions.
Description
Ez Guestbook 1.0 - Multiple Vulnerabilities
Exploits (1)
exploitdb
WORKING POC
by Milos Zivanovic · textwebappsphp
https://www.exploit-db.com/exploits/10420
The exploit demonstrates CSRF vulnerabilities in Ez Guestbook 1.0, allowing unauthorized password changes and post deletion via crafted HTTP requests. It includes functional HTML forms and URLs to trigger these actions.
Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
Ez Guestbook 1.0
No auth needed
Prerequisites:
Victim must be authenticated as admin and tricked into submitting the form or visiting the malicious URL
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026