Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111342. PoCs published by Curesec Research Team.
AI-analyzed exploit summary The document describes multiple SQL injection vulnerabilities in Pligg CMS 2.0.2, including unauthenticated SQLi via the 'comment_id' parameter and blind SQLi in the admin area. Proof-of-concept URLs and payloads are provided, but no executable exploit code is included.
Description
Pligg CMS 2.0.2 - Multiple SQL Injections
Exploits (1)
exploitdb
WRITEUP
by Curesec Research Team · textwebappsphp
https://www.exploit-db.com/exploits/38577
The document describes multiple SQL injection vulnerabilities in Pligg CMS 2.0.2, including unauthenticated SQLi via the 'comment_id' parameter and blind SQLi in the admin area. Proof-of-concept URLs and payloads are provided, but no executable exploit code is included.
Classification
Writeup 100%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
Pligg CMS 2.0.2
No auth needed
Prerequisites:
Network access to the target Pligg CMS instance
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026