EIP-2026-110639

PRE-CVE

PHP Address Book 7.0.0 - Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110639. PoCs published by Stefan Schurtz.

AI-analyzed exploit summary The exploit demonstrates multiple XSS and SQL injection vulnerabilities in PHP Address Book 7.0.0. It includes proof-of-concept URLs for both reflected XSS and SQLi, including a UNION-based injection example.

Description

PHP Address Book 7.0.0 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by Stefan Schurtz · textwebappsphp

https://www.exploit-db.com/exploits/18899

View Code ZIP pw:eip

The exploit demonstrates multiple XSS and SQL injection vulnerabilities in PHP Address Book 7.0.0. It includes proof-of-concept URLs for both reflected XSS and SQLi, including a UNION-based injection example.

Classification

Working Poc 90%

Attack Type

Xss | Sqli

Complexity

Trivial

Reliability

Reliable

Target: PHP Address Book 7.0.0

No auth needed

Prerequisites: Target running PHP Address Book 7.0.0 · Network access to the target

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026