EIP-2026-110776
PRE-CVEPHP TopSites 2.1 - '/rate.php' Cross-Site Scripting / SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-110776. PoCs published by c0de Hunters.
AI-analyzed exploit summary The exploit demonstrates SQL injection and XSS vulnerabilities in PHP TopSites 2.1 by providing crafted URIs that extract user credentials and execute arbitrary JavaScript. The SQLi example uses UNION-based injection to dump email and password data, while the XSS example injects a script tag.
Description
PHP TopSites 2.1 - '/rate.php' Cross-Site Scripting / SQL Injection
Exploits (1)
The exploit demonstrates SQL injection and XSS vulnerabilities in PHP TopSites 2.1 by providing crafted URIs that extract user credentials and execute arbitrary JavaScript. The SQLi example uses UNION-based injection to dump email and password data, while the XSS example injects a script tag.