EIP-2026-107741

PRE-CVE

iCMS 1.1 - Admin SQL Injection / Brute Force

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107741. PoCs published by TecR0c.

AI-analyzed exploit summary This exploit targets iCMS v1.1, leveraging SQL injection to achieve remote code execution by writing a PHP webshell. It includes brute-force authentication and a reverse shell-like command execution interface.

Description

iCMS 1.1 - Admin SQL Injection / Brute Force

Exploits (1)

exploitdb WORKING POC VERIFIED
by TecR0c · pythonwebappsphp
https://www.exploit-db.com/exploits/17003

This exploit targets iCMS v1.1, leveraging SQL injection to achieve remote code execution by writing a PHP webshell. It includes brute-force authentication and a reverse shell-like command execution interface.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: iCMS v1.1
Auth required
Prerequisites: knowledge of web path · file write privileges · valid admin username · password wordlist
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026