EIP-2026-112239

PRE-CVE

SmartBlog 1.3 - SQL Injection / Cross-Site Scripting

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112239. PoCs published by indoushka.

AI-analyzed exploit summary The exploit demonstrates SQL injection and XSS vulnerabilities in SmartBlog 1.3 by providing crafted URLs that manipulate the 'mois' and 'an' parameters. The payloads are functional and can be used to exploit the vulnerabilities directly.

Description

SmartBlog 1.3 - SQL Injection / Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC VERIFIED

by indoushka · textwebappsphp

https://www.exploit-db.com/exploits/33889

View Code ZIP pw:eip

The exploit demonstrates SQL injection and XSS vulnerabilities in SmartBlog 1.3 by providing crafted URLs that manipulate the 'mois' and 'an' parameters. The payloads are functional and can be used to exploit the vulnerabilities directly.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: SmartBlog 1.3

No auth needed

Prerequisites: Access to the target application URL

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026