EIP-2026-109192

PRE-CVE

Lms Web Ensino - Multiple Input Validation Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109192. PoCs published by waKKu.

AI-analyzed exploit summary The provided text describes multiple vulnerabilities in LMS Web Ensino, including XSS, SQLi, CSRF, and session fixation, with example URLs demonstrating XSS and SQLi attack vectors. It does not contain executable exploit code but serves as a vulnerability advisory.

Description

Lms Web Ensino - Multiple Input Validation Vulnerabilities

Exploits (1)

exploitdb WRITEUP VERIFIED
by waKKu · textwebappsphp
https://www.exploit-db.com/exploits/35444

The provided text describes multiple vulnerabilities in LMS Web Ensino, including XSS, SQLi, CSRF, and session fixation, with example URLs demonstrating XSS and SQLi attack vectors. It does not contain executable exploit code but serves as a vulnerability advisory.

Classification
Writeup 90%
Attack Type
Xss | Sqli | Csrf | Session Fixation
Complexity
Trivial
Reliability
Theoretical
Target: LMS Web Ensino
No auth needed
Prerequisites: Access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026