EIP-2026-112132

PRE-CVE

Simple PHP Polling System - Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112132. PoCs published by WICS.

AI-analyzed exploit summary The document describes multiple vulnerabilities in Simple PHP Polling System, including SQL injection, password reset, and persistent XSS. It provides PoC examples for each vulnerability but does not include executable exploit code.

Description

Simple PHP Polling System - Multiple Vulnerabilities

Exploits (1)

exploitdb WRITEUP

by WICS · textwebappsphp

https://www.exploit-db.com/exploits/39168

View Code ZIP pw:eip

The document describes multiple vulnerabilities in Simple PHP Polling System, including SQL injection, password reset, and persistent XSS. It provides PoC examples for each vulnerability but does not include executable exploit code.

Classification

Writeup 90%

Attack Type

Sqli | Xss | Auth Bypass

Complexity

Trivial

Reliability

Theoretical

Target: Simple PHP Polling System

Auth required

Prerequisites: Access to the vulnerable application · Valid user credentials for certain attacks

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1189 - Drive-by Compromise

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026