Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109711. PoCs published by Lucian Ioan Nitescu.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in MyBB Downloads plugin 2.0.3. The PoC shows how an attacker can inject malicious SQL syntax via the 'name' parameter in a POST request, leading to a syntax error and potential data extraction using tools like sqlmap.
Description
MyBB Downloads 2.0.3 - SQL Injection
Exploits (1)
exploitdb
WORKING POC
by Lucian Ioan Nitescu · textwebappsphp
https://www.exploit-db.com/exploits/45747
This exploit demonstrates a SQL injection vulnerability in MyBB Downloads plugin 2.0.3. The PoC shows how an attacker can inject malicious SQL syntax via the 'name' parameter in a POST request, leading to a syntax error and potential data extraction using tools like sqlmap.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
MyBB Downloads Plugin 2.0.3
Auth required
Prerequisites:
Access to the MyBB Downloads plugin page · Valid session cookies for authentication
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026