Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111459. PoCs published by shiZheni.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Practico CMS version 13.7 and earlier, allowing an attacker to bypass authentication by injecting a crafted payload into the login form. The provided HTTP POST request shows a simple SQLi technique using a tautology to bypass the login mechanism.
Description
Practico CMS 13.7 - Authentication Bypass
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Practico CMS version 13.7 and earlier, allowing an attacker to bypass authentication by injecting a crafted payload into the login form. The provided HTTP POST request shows a simple SQLi technique using a tautology to bypass the login mechanism.