EIP-2026-110448

PRE-CVE

paFileDB 3.5.2/3.5.3 - Remote Authentication Bypass / SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110448. PoCs published by koray.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in pafileDB versions 3.5.2 and 3.5.3 via cookie manipulation. The PoC shows how to bypass authentication by injecting SQL into the username and password fields.

Description

paFileDB 3.5.2/3.5.3 - Remote Authentication Bypass / SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED
by koray · textwebappsphp
https://www.exploit-db.com/exploits/2899

This exploit demonstrates a SQL injection vulnerability in pafileDB versions 3.5.2 and 3.5.3 via cookie manipulation. The PoC shows how to bypass authentication by injecting SQL into the username and password fields.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: pafileDB 3.5.2 / 3.5.3
No auth needed
Prerequisites: Access to the vulnerable pafileDB login page
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026