EIP-2026-109056

PRE-CVE

KwsPHP 1.3.456 Module Archives - 'id' SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109056. PoCs published by S@BUN.

AI-analyzed exploit summary The exploit demonstrates a SQL injection vulnerability in KwsPHP v1.3.456 by injecting malicious SQL queries via the 'id' parameter in the archives module. It extracts user credentials (pseudo and pass) from the 'users' table using UNION-based SQLi techniques.

Description

KwsPHP 1.3.456 Module Archives - 'id' SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED

by S@BUN · textwebappsphp

https://www.exploit-db.com/exploits/5351

View Code ZIP pw:eip

The exploit demonstrates a SQL injection vulnerability in KwsPHP v1.3.456 by injecting malicious SQL queries via the 'id' parameter in the archives module. It extracts user credentials (pseudo and pass) from the 'users' table using UNION-based SQLi techniques.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: KwsPHP v1.3.456

No auth needed

Prerequisites: Target application must be running KwsPHP v1.3.456 · The archives module must be accessible

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026