EIP-2026-109685

PRE-CVE

MyBB 1.0.3 - 'private.php' Multiple SQL Injections

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109685. PoCs published by imei.

AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in MyBB 1.0.3 via crafted HTTP requests targeting the 'private.php' endpoint. The PoC shows how unsanitized input in the 'folder' and 'check' parameters can be manipulated to inject SQL queries.

Description

MyBB 1.0.3 - 'private.php' Multiple SQL Injections

Exploits (1)

exploitdb WORKING POC VERIFIED
by imei · textwebappsphp
https://www.exploit-db.com/exploits/27236

The exploit demonstrates SQL injection vulnerabilities in MyBB 1.0.3 via crafted HTTP requests targeting the 'private.php' endpoint. The PoC shows how unsanitized input in the 'folder' and 'check' parameters can be manipulated to inject SQL queries.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: MyBB 1.0.3
No auth needed
Prerequisites: Access to the target MyBB instance
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026