EIP-2026-110208

PRE-CVE

Onpub CMS 1.4/1.5 - Multiple SQL Injections

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110208. PoCs published by Vulnerability-Lab.

AI-analyzed exploit summary This document describes multiple SQL injection and XSS vulnerabilities in Onpub CMS versions 1.4 and 1.5. It includes detailed technical descriptions, vulnerable parameters, and proof-of-concept URLs for exploitation.

Description

Onpub CMS 1.4/1.5 - Multiple SQL Injections

Exploits (1)

exploitdb WRITEUP
by Vulnerability-Lab · textwebappsphp
https://www.exploit-db.com/exploits/29264

This document describes multiple SQL injection and XSS vulnerabilities in Onpub CMS versions 1.4 and 1.5. It includes detailed technical descriptions, vulnerable parameters, and proof-of-concept URLs for exploitation.

Classification
Writeup 100%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Reliable
Target: Onpub CMS 1.4 & 1.5
No auth needed
Prerequisites: Access to the vulnerable Onpub CMS instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026