EIP-2026-109214

PRE-CVE

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109214. PoCs published by Aria-Security Team.

AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in a travel site application by crafting malicious URLs that update database records. The payloads directly modify database fields without authentication, confirming the presence of SQLi flaws.

Description

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED

by Aria-Security Team · textwebappsphp

https://www.exploit-db.com/exploits/4710

View Code ZIP pw:eip

The exploit demonstrates SQL injection vulnerabilities in a travel site application by crafting malicious URLs that update database records. The payloads directly modify database fields without authentication, confirming the presence of SQLi flaws.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: DATABASE DRIVEN TRAVEL SITE by Lotfian.com

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026