Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107354. PoCs published by LiquidWorm.
AI-analyzed exploit summary The advisory details SQL injection and XSS vulnerabilities in GAzie 5.10 via the 'Login' parameter in 'login_admin.php'. It includes proof-of-concept payloads for SQLi (including blind SQLi with timing) and XSS, along with error messages confirming exploitation.
Description
GAzie 5.10 - 'Login' Multiple Vulnerabilities
Exploits (1)
exploitdb
WRITEUP
by LiquidWorm · textwebappsphp
https://www.exploit-db.com/exploits/16183
The advisory details SQL injection and XSS vulnerabilities in GAzie 5.10 via the 'Login' parameter in 'login_admin.php'. It includes proof-of-concept payloads for SQLi (including blind SQLi with timing) and XSS, along with error messages confirming exploitation.
Classification
Writeup 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Reliable
Target:
GAzie 5.10
No auth needed
Prerequisites:
Network access to the target application
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026