EIP-2026-111487

PRE-CVE

Preisschlacht Multi Liveshop System - 'index.php?aid' SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111487. PoCs published by Easy Laster.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Preisschlacht Multi Liveshop System via the 'seite' and 'aid' parameters in index.php. It allows an attacker to extract sensitive user data (ID, username, password) from the 'ls_kunden' table.

Description

Preisschlacht Multi Liveshop System - 'index.php?aid' SQL Injection

Exploits (1)

exploitdb WORKING POC

by Easy Laster · textwebappsphp

https://www.exploit-db.com/exploits/11783

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in Preisschlacht Multi Liveshop System via the 'seite' and 'aid' parameters in index.php. It allows an attacker to extract sensitive user data (ID, username, password) from the 'ls_kunden' table.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Preisschlacht Multi Liveshop System

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026