EIP-2026-111968
PRE-CVESeditio 1.10 - 'Users.Profile.Inc.php' SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-111968. PoCs published by Mustafa Can Bjorn.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in Seditio 1.10 by manipulating the 'id' parameter in a URL to inject malicious SQL code. The payload attempts to update the admin user's password hash to a known value (e10adc3949ba59abbe56e057f20f883e, which is the MD5 hash for '123456').
Description
Seditio 1.10 - 'Users.Profile.Inc.php' SQL Injection
Exploits (1)
This exploit demonstrates an SQL injection vulnerability in Seditio 1.10 by manipulating the 'id' parameter in a URL to inject malicious SQL code. The payload attempts to update the admin user's password hash to a known value (e10adc3949ba59abbe56e057f20f883e, which is the MD5 hash for '123456').