EIP-2026-107061

PRE-CVE

FBDj - 'id' SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107061. PoCs published by TUNISIAN CYBER.

AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in FBDj by providing crafted URLs that inject single quotes into the 'id' parameter of multiple endpoints. This can compromise the application or underlying database due to insufficient input sanitization.

Description

FBDj - 'id' SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED
by TUNISIAN CYBER · textwebappsphp
https://www.exploit-db.com/exploits/37790

The exploit demonstrates an SQL injection vulnerability in FBDj by providing crafted URLs that inject single quotes into the 'id' parameter of multiple endpoints. This can compromise the application or underlying database due to insufficient input sanitization.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: FBDj (version unspecified)
No auth needed
Prerequisites: Access to the vulnerable web application endpoints
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026