EIP-2026-110691

PRE-CVE

PHP Ecommerce Script 2.0.6 - Cross-Site Scripting / SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110691. PoCs published by Mr Winst0n.

AI-analyzed exploit summary The exploit demonstrates XSS and SQL injection vulnerabilities in PHP Ecommerce Script 2.0.6 via the 's' parameter. The PoC includes payloads for both attack types, confirming their functionality.

Description

PHP Ecommerce Script 2.0.6 - Cross-Site Scripting / SQL Injection

Exploits (1)

exploitdb WORKING POC
by Mr Winst0n · textwebappsphp
https://www.exploit-db.com/exploits/46455

The exploit demonstrates XSS and SQL injection vulnerabilities in PHP Ecommerce Script 2.0.6 via the 's' parameter. The PoC includes payloads for both attack types, confirming their functionality.

Classification
Working Poc 90%
Attack Type
Xss | Sqli
Complexity
Trivial
Reliability
Reliable
Target: PHP Ecommerce Script 2.0.6
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026