EIP-2026-109365

PRE-CVE

MC Buy and Sell Cars Script 1.1 - SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109365. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary This is a writeup describing SQL injection vulnerabilities and an admin login bypass in MC Buy and Sell Cars Script V1.1. It provides URLs for exploitation but does not include functional exploit code.

Description

MC Buy and Sell Cars Script 1.1 - SQL Injection

Exploits (1)

exploitdb WRITEUP

by Ihsan Sencan · textwebappsphp

https://www.exploit-db.com/exploits/41064

View Code ZIP pw:eip

This is a writeup describing SQL injection vulnerabilities and an admin login bypass in MC Buy and Sell Cars Script V1.1. It provides URLs for exploitation but does not include functional exploit code.

Classification

Writeup 90%

Attack Type

Sqli | Auth Bypass

Complexity

Trivial

Reliability

Theoretical

Target: MC Buy and Sell Cars Script V1.1

No auth needed

Prerequisites: access to the vulnerable web application

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026