Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107192. PoCs published by Filippo Roncari.
AI-analyzed exploit summary The exploit demonstrates multiple SQL injection vulnerabilities in Forma LMS 1.3, including blind time-based and union-based SQLi. It provides specific HTTP POST requests with crafted payloads targeting parameters like 'title' and 'id_source' to extract sensitive data such as user passwords.
Description
Forma LMS 1.3 - Multiple SQL Injections
Exploits (1)
The exploit demonstrates multiple SQL injection vulnerabilities in Forma LMS 1.3, including blind time-based and union-based SQLi. It provides specific HTTP POST requests with crafted payloads targeting parameters like 'title' and 'id_source' to extract sensitive data such as user passwords.