EIP-2026-111192

PRE-CVE

phpRS 2.8.1 - Multiple SQL Injections / Cross-Site Scripting

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111192. PoCs published by iM4n.

AI-analyzed exploit summary The provided code demonstrates multiple SQL injection and cross-site scripting (XSS) vulnerabilities in phpRS 2.8.1. It includes example URLs with payloads that exploit these vulnerabilities, such as injecting JavaScript code to steal cookies and SQL injection placeholders.

Description

phpRS 2.8.1 - Multiple SQL Injections / Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC VERIFIED

by iM4n · textwebappsphp

https://www.exploit-db.com/exploits/36148

View Code ZIP pw:eip

The provided code demonstrates multiple SQL injection and cross-site scripting (XSS) vulnerabilities in phpRS 2.8.1. It includes example URLs with payloads that exploit these vulnerabilities, such as injecting JavaScript code to steal cookies and SQL injection placeholders.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: phpRS 2.8.1

No auth needed

Prerequisites: Access to the vulnerable phpRS application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026