Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110013. PoCs published by Ephreet.
AI-analyzed exploit summary The exploit details a SQL injection vulnerability in OCS Inventory NG <= 2.2, allowing for time-based SQLi and arbitrary file write via MySQL's INTO OUTFILE. The PoC demonstrates how to achieve remote code execution by writing a PHP webshell to a writable directory.
Description
OCS Inventory NG 2.2 - SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Ephreet · textwebappsphp
https://www.exploit-db.com/exploits/39458
The exploit details a SQL injection vulnerability in OCS Inventory NG <= 2.2, allowing for time-based SQLi and arbitrary file write via MySQL's INTO OUTFILE. The PoC demonstrates how to achieve remote code execution by writing a PHP webshell to a writable directory.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target:
OCS Inventory NG <= 2.2
Auth required
Prerequisites:
Low-privileged user access · Search function access · Writable directory permissions
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026