EIP-2026-110026

PRE-CVE

omegabill 1.0 build 6 - Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110026. PoCs published by AutoSec Tools.

AI-analyzed exploit summary The exploit demonstrates arbitrary PHP execution and SQL injection vulnerabilities in OmegaBill v1.0 Build 6. It includes functional PoC code for RCE via PHP injection and SQLi for authentication bypass and credential extraction.

Description

omegabill 1.0 build 6 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC

by AutoSec Tools · textwebappsphp

https://www.exploit-db.com/exploits/16172

View Code ZIP pw:eip

The exploit demonstrates arbitrary PHP execution and SQL injection vulnerabilities in OmegaBill v1.0 Build 6. It includes functional PoC code for RCE via PHP injection and SQLi for authentication bypass and credential extraction.

Classification

Working Poc 100%

Attack Type

Rce, Sqli, Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: OmegaBill v1.0 Build 6

No auth needed

Prerequisites: Network access to the target application · OmegaBill v1.0 Build 6 installed

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution T1189 - Drive-by Compromise

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026