Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109168. PoCs published by Hussin X.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the 'addlink.php' script, allowing an attacker to extract admin credentials (email and password) via a UNION-based SQLi attack. The payload concatenates the email and password fields with a '>' separator for easy extraction.
Description
list Web - 'addlink.php?id' SQL Injection
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in the 'addlink.php' script, allowing an attacker to extract admin credentials (email and password) via a UNION-based SQLi attack. The payload concatenates the email and password fields with a '>' separator for easy extraction.