EIP-2026-111494

PRE-CVE

PrestaShop - 'getSimilarManufacturer.php?id_manufacturer' SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111494. PoCs published by indoushka.

AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in PrestaShop 1.6.0, with an example URL demonstrating the SQL injection vector. No actual exploit code is present.

Description

PrestaShop - 'getSimilarManufacturer.php?id_manufacturer' SQL Injection

Exploits (1)

exploitdb WRITEUP VERIFIED

by indoushka · textwebappsphp

https://www.exploit-db.com/exploits/39172

View Code ZIP pw:eip

The provided text describes SQL injection and XSS vulnerabilities in PrestaShop 1.6.0, with an example URL demonstrating the SQL injection vector. No actual exploit code is present.

Classification

Writeup 80%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Theoretical

Target: PrestaShop 1.6.0

No auth needed

Prerequisites: Access to the target PrestaShop instance

MITRE ATT&CK

T1105 - Ingress Tool Transfer T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026