Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112347. PoCs published by J3rryBl4nks.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in SOPlanning 1.45 via the 'by' parameter in the OrderBy clause. It includes a captured HTTP request and instructions for using SQLMap to dump user credentials from the database.
Description
SOPlanning 1.45 - 'by' SQL Injection
Exploits (1)
exploitdb
WORKING POC
by J3rryBl4nks · textwebappsphp
https://www.exploit-db.com/exploits/48074
This exploit demonstrates a SQL injection vulnerability in SOPlanning 1.45 via the 'by' parameter in the OrderBy clause. It includes a captured HTTP request and instructions for using SQLMap to dump user credentials from the database.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target:
SOPlanning 1.45
No auth needed
Prerequisites:
Access to the target application · SQLMap installed
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026