EIP-2026-111172
PRE-CVEphpMySport 1.4 - SQL Injection / Authentication Bypass / Full Path Disclosure
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-111172. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The exploit demonstrates multiple SQL injection vulnerabilities in phpMySport 1.4, allowing attackers to execute arbitrary SQL queries via unsanitized input in 'v1', 'name', and 'v2' variables. It also includes an authentication bypass and path disclosure proof-of-concept.
Description
phpMySport 1.4 - SQL Injection / Authentication Bypass / Full Path Disclosure
Exploits (1)
The exploit demonstrates multiple SQL injection vulnerabilities in phpMySport 1.4, allowing attackers to execute arbitrary SQL queries via unsanitized input in 'v1', 'name', and 'v2' variables. It also includes an authentication bypass and path disclosure proof-of-concept.