Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107809. PoCs published by Manuel García Cárdenas.
AI-analyzed exploit summary This is a vulnerability advisory detailing a time-based SQL injection in ImpressCMS <= v1.3.9. The PoC demonstrates the injection via the 'quicksearch_mod_profile_Field' parameter in the admin panel.
Description
ImpressCMS 1.3.9 - SQL Injection
Exploits (1)
exploitdb
WRITEUP
by Manuel García Cárdenas · textwebappsphp
https://www.exploit-db.com/exploits/39737
This is a vulnerability advisory detailing a time-based SQL injection in ImpressCMS <= v1.3.9. The PoC demonstrates the injection via the 'quicksearch_mod_profile_Field' parameter in the admin panel.
Classification
Writeup 100%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
ImpressCMS <= v1.3.9
Auth required
Prerequisites:
Admin access to the ImpressCMS panel · HTTP/1.0 protocol usage
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026