EIP-2026-111559

PRE-CVE

Prozilla Software Directory - Cross-Site Scripting / SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111559. PoCs published by G4N0K.

AI-analyzed exploit summary This exploit demonstrates SQL injection and XSS vulnerabilities in Software Directory v1.0. The SQLi extracts database version and user information, while the XSS executes arbitrary JavaScript.

Description

Prozilla Software Directory - Cross-Site Scripting / SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED

by G4N0K · textwebappsphp

https://www.exploit-db.com/exploits/7027

View Code ZIP pw:eip

This exploit demonstrates SQL injection and XSS vulnerabilities in Software Directory v1.0. The SQLi extracts database version and user information, while the XSS executes arbitrary JavaScript.

Classification

Working Poc 95%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Software Directory v1.0

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026