EIP-2026-109733

PRE-CVE

MyBB Profile Wii Friend Code - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109733. PoCs published by Ichi.

AI-analyzed exploit summary This exploit demonstrates SQL injection and persistent XSS vulnerabilities in the 'Profile Wii Friend Code' MyBB plugin version 1.0. The input is unsanitized, allowing attackers to inject malicious SQL queries or JavaScript code.

Description

MyBB Profile Wii Friend Code - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by Ichi · textwebappsphp
https://www.exploit-db.com/exploits/23888

This exploit demonstrates SQL injection and persistent XSS vulnerabilities in the 'Profile Wii Friend Code' MyBB plugin version 1.0. The input is unsanitized, allowing attackers to inject malicious SQL queries or JavaScript code.

Classification
Working Poc 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Reliable
Target: MyBB Profile Wii Friend Code plugin 1.0
Auth required
Prerequisites: Access to a user account on the MyBB forum · The 'Profile Wii Friend Code' plugin must be installed and active
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026