EIP-2026-107705

PRE-CVE

IBD Micro CMS 3.5 - 'microcms-admin-login.php' Multiple SQL Injections

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107705. PoCs published by SkyOut.

AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in IBD Micro CMS 3.5 by providing crafted username and password inputs that bypass authentication. The PoC leverages improper sanitization of user-supplied data in SQL queries.

Description

IBD Micro CMS 3.5 - 'microcms-admin-login.php' Multiple SQL Injections

Exploits (1)

exploitdb WORKING POC VERIFIED
by SkyOut · textwebappsphp
https://www.exploit-db.com/exploits/31781

This exploit demonstrates SQL injection vulnerabilities in IBD Micro CMS 3.5 by providing crafted username and password inputs that bypass authentication. The PoC leverages improper sanitization of user-supplied data in SQL queries.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: IBD Micro CMS 3.5
No auth needed
Prerequisites: Access to the login interface of IBD Micro CMS
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026