EIP-2026-109166

PRE-CVE

LIOOSYS CMS - SQL Injection / Information Disclosure

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109166. PoCs published by MustLive.

AI-analyzed exploit summary The entry describes SQL injection and information disclosure vulnerabilities in LIOOSYS CMS, providing example URIs for exploitation. It lacks functional exploit code but includes technical details about the vulnerabilities.

Description

LIOOSYS CMS - SQL Injection / Information Disclosure

Exploits (1)

exploitdb WRITEUP VERIFIED

by MustLive · textwebappsphp

https://www.exploit-db.com/exploits/37469

View Code ZIP pw:eip

The entry describes SQL injection and information disclosure vulnerabilities in LIOOSYS CMS, providing example URIs for exploitation. It lacks functional exploit code but includes technical details about the vulnerabilities.

Classification

Writeup 80%

Attack Type

Sqli | Info Leak

Complexity

Trivial

Reliability

Theoretical

Target: LIOOSYS CMS

No auth needed

Prerequisites: Access to the target web application

MITRE ATT&CK

T1189 - Drive-by Compromise T1592 - Gather Victim Host Information

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026