Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110254. PoCs published by Albert Puigsech Galicia.
AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in OpenBB's 'member.php' script. The vulnerability allows an attacker to inject arbitrary SQL queries via the 'UID' parameter, with consequences depending on the underlying database.
Description
OpenBB 1.0/1.1 - 'member.php' SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Albert Puigsech Galicia · textwebappsphp
https://www.exploit-db.com/exploits/22520
This is a writeup describing a SQL injection vulnerability in OpenBB's 'member.php' script. The vulnerability allows an attacker to inject arbitrary SQL queries via the 'UID' parameter, with consequences depending on the underlying database.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
OpenBB (version not specified)
No auth needed
Prerequisites:
Access to the 'member.php' script on a vulnerable OpenBB instance
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026