EIP-2026-110167

PRE-CVE

Online Resort Management System 1.0 - SQLi (Authenticated)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110167. PoCs published by Gaurav Grover.

AI-analyzed exploit summary This exploit demonstrates an authenticated SQL injection vulnerability in Online Resort Management System 1.0. It includes manual SQLi queries and automated sqlmap commands to dump the database, retrieve table names, and extract user credentials.

Description

Online Resort Management System 1.0 - SQLi (Authenticated)

Exploits (1)

exploitdb WORKING POC

by Gaurav Grover · textwebappsphp

https://www.exploit-db.com/exploits/50666

View Code ZIP pw:eip

This exploit demonstrates an authenticated SQL injection vulnerability in Online Resort Management System 1.0. It includes manual SQLi queries and automated sqlmap commands to dump the database, retrieve table names, and extract user credentials.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Online Resort Management System 1.0

Auth required

Prerequisites: Admin credentials (admin/admin123) · Access to the vulnerable parameter 'id' in the URL

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026