Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112166. PoCs published by NoGe.
AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in SimpNews version 2.16.2 and below, targeting multiple parameters in different files to extract user credentials. The PoC includes crafted SQL queries to dump usernames and passwords from the database.
Description
SimpNews 2.16.2 - Multiple SQL Injections
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by NoGe · textwebappsphp
https://www.exploit-db.com/exploits/12007
This exploit demonstrates SQL injection vulnerabilities in SimpNews version 2.16.2 and below, targeting multiple parameters in different files to extract user credentials. The PoC includes crafted SQL queries to dump usernames and passwords from the database.
Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
SimpNews version 2.16.2 and below
No auth needed
Prerequisites:
Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026