EIP-2026-111222

PRE-CVE

phptpoint Hospital Management System 1.0 - 'user' SQL injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111222. PoCs published by Boumediene KADDOUR.

AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in phptpoint Hospital Management System 1.0, allowing authentication bypass and arbitrary database manipulation via crafted POST and GET requests.

Description

phptpoint Hospital Management System 1.0 - 'user' SQL injection

Exploits (1)

exploitdb WORKING POC

by Boumediene KADDOUR · textwebappsphp

https://www.exploit-db.com/exploits/45683

View Code ZIP pw:eip

This exploit demonstrates SQL injection vulnerabilities in phptpoint Hospital Management System 1.0, allowing authentication bypass and arbitrary database manipulation via crafted POST and GET requests.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: phptpoint Hospital Management System 1.0

No auth needed

Prerequisites: Network access to the target application · SQL injection payloads

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026