Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112206. PoCs published by farbodmahini.
AI-analyzed exploit summary This is a vulnerability writeup describing a cross-site scripting (XSS) issue in SKYUC 3.2.1 due to improper input sanitization. The example demonstrates how an attacker could inject arbitrary script code via the 'encode' parameter in search.php.
Description
SKYUC 3.2.1 - 'encode' Cross-Site Scripting
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by farbodmahini · textwebappsphp
https://www.exploit-db.com/exploits/37118
This is a vulnerability writeup describing a cross-site scripting (XSS) issue in SKYUC 3.2.1 due to improper input sanitization. The example demonstrates how an attacker could inject arbitrary script code via the 'encode' parameter in search.php.
Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
SKYUC 3.2.1
No auth needed
Prerequisites:
Access to the vulnerable search.php endpoint
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026