Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107198. PoCs published by Jean Pascal Pereira.
AI-analyzed exploit summary The document details a SQL injection vulnerability in Forum Oxalis 0.1.2, where the 'id' parameter in 'forum.php' is directly used in a SQL query without sanitization. The proof-of-concept URL demonstrates the vulnerability by injecting a UNION-based SQL query to retrieve the database version.
Description
Forum Oxalis 0.1.2 - SQL Injection
Exploits (1)
The document details a SQL injection vulnerability in Forum Oxalis 0.1.2, where the 'id' parameter in 'forum.php' is directly used in a SQL query without sanitization. The proof-of-concept URL demonstrates the vulnerability by injecting a UNION-based SQL query to retrieve the database version.