EIP-2026-109328

PRE-CVE

Marinet CMS - SQL Injection / Cross-Site Scripting / HTML Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109328. PoCs published by CoBRa_21.

AI-analyzed exploit summary The exploit demonstrates SQL injection, XSS, and HTML injection vulnerabilities in Marinet CMS. It includes functional payloads for extracting database information and injecting malicious scripts or HTML into vulnerable parameters.

Description

Marinet CMS - SQL Injection / Cross-Site Scripting / HTML Injection

Exploits (1)

exploitdb WORKING POC

by CoBRa_21 · textwebappsphp

https://www.exploit-db.com/exploits/12577

View Code ZIP pw:eip

The exploit demonstrates SQL injection, XSS, and HTML injection vulnerabilities in Marinet CMS. It includes functional payloads for extracting database information and injecting malicious scripts or HTML into vulnerable parameters.

Classification

Working Poc 90%

Attack Type

Sqli | Xss | Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Marinet CMS (version unspecified)

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026