EIP-2026-107806

PRE-CVE

Immophp 1.1.1 - Cross-Site Scripting / SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107806. PoCs published by KedAns-Dz.

AI-analyzed exploit summary The exploit demonstrates SQL injection and XSS vulnerabilities in Immophp 1.1.1 due to insufficient input sanitization. It includes example URLs to exploit these vulnerabilities, allowing attackers to extract database information or execute arbitrary JavaScript.

Description

Immophp 1.1.1 - Cross-Site Scripting / SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED

by KedAns-Dz · textwebappsphp

https://www.exploit-db.com/exploits/35866

View Code ZIP pw:eip

The exploit demonstrates SQL injection and XSS vulnerabilities in Immophp 1.1.1 due to insufficient input sanitization. It includes example URLs to exploit these vulnerabilities, allowing attackers to extract database information or execute arbitrary JavaScript.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Immophp 1.1.1

No auth needed

Prerequisites: Access to the target web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026