Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111401. PoCs published by S2K9.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in PonVFTP, where insufficient sanitization of user-supplied data allows attackers to manipulate SQL queries. The example payload ('or' 1=1) demonstrates a basic SQLi technique to bypass authentication.
Description
PonVFTP - 'login.php' SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by S2K9 · textwebappsphp
https://www.exploit-db.com/exploits/34095
The provided text describes an SQL injection vulnerability in PonVFTP, where insufficient sanitization of user-supplied data allows attackers to manipulate SQL queries. The example payload ('or' 1=1) demonstrates a basic SQLi technique to bypass authentication.
Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
PonVFTP (version unspecified)
No auth needed
Prerequisites:
Access to the vulnerable PonVFTP application
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026