EIP-2026-108676

PRE-CVE

Joomla! Component Intranet Attendance Track 2.6.5 - SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108676. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in Joomla! Component Intranet Attendance Track v2.6.5. It provides multiple endpoints where SQL injection can be executed via URL parameters such as 'year', 'month', 'weekuptodate', etc.

Description

Joomla! Component Intranet Attendance Track 2.6.5 - SQL Injection

Exploits (1)

exploitdb WORKING POC
by Ihsan Sencan · textwebappsphp
https://www.exploit-db.com/exploits/41456

The exploit demonstrates SQL injection vulnerabilities in Joomla! Component Intranet Attendance Track v2.6.5. It provides multiple endpoints where SQL injection can be executed via URL parameters such as 'year', 'month', 'weekuptodate', etc.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Joomla! Component Intranet Attendance Track v2.6.5
Auth required
Prerequisites: Access to a vulnerable Joomla! instance · Valid user credentials
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026