EIP-2026-111628

PRE-CVE

quality point 1.0 newsfeed - SQL Injection / Cross-Site Scripting

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111628. PoCs published by Red-D3v1L.

AI-analyzed exploit summary This exploit demonstrates SQL injection and XSS vulnerabilities in Quality Point 1.0 NewsFeed. The SQLi allows retrieval of user credentials and database version, while the XSS enables arbitrary script execution.

Description

quality point 1.0 newsfeed - SQL Injection / Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC VERIFIED

by Red-D3v1L · textwebappsphp

https://www.exploit-db.com/exploits/11808

View Code ZIP pw:eip

This exploit demonstrates SQL injection and XSS vulnerabilities in Quality Point 1.0 NewsFeed. The SQLi allows retrieval of user credentials and database version, while the XSS enables arbitrary script execution.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Quality Point 1.0 NewsFeed

No auth needed

Prerequisites: Access to the vulnerable endpoint

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026