Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109680. PoCs published by W7ED.
AI-analyzed exploit summary This Perl script exploits an SQL injection vulnerability in MyBB's member.php by manipulating the 'uid' parameter to extract user password hashes via a UNION-based attack. It requires no authentication and directly queries the database for sensitive information.
Description
MyBB - 'member.php' SQL Injection
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by W7ED · perlwebappsphp
https://www.exploit-db.com/exploits/26204
This Perl script exploits an SQL injection vulnerability in MyBB's member.php by manipulating the 'uid' parameter to extract user password hashes via a UNION-based attack. It requires no authentication and directly queries the database for sensitive information.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
MyBB (version not specified)
No auth needed
Prerequisites:
Target MyBB installation with vulnerable member.php endpoint · Network access to the target
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026