EIP-2026-107342

PRE-CVE

gamescript 4.6 - Cross-Site Scripting / SQL Injection / Local File Inclusion

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107342. PoCs published by Encrypt3d.M!nd.

AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in GameScript 4.6, including XSS, SQL injection, and local file inclusion. The PoC provides specific URLs and payloads to exploit these vulnerabilities.

Description

gamescript 4.6 - Cross-Site Scripting / SQL Injection / Local File Inclusion

Exploits (1)

exploitdb WORKING POC VERIFIED

by Encrypt3d.M!nd · textwebappsphp

https://www.exploit-db.com/exploits/7893

View Code ZIP pw:eip

This exploit demonstrates multiple vulnerabilities in GameScript 4.6, including XSS, SQL injection, and local file inclusion. The PoC provides specific URLs and payloads to exploit these vulnerabilities.

Classification

Working Poc 90%

Attack Type

Xss | Sqli | Other

Complexity

Trivial

Reliability

Reliable

Target: GameScript 4.6

No auth needed

Prerequisites: Access to the target web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026