EIP-2026-112380

PRE-CVE

Sphider 1.3.x - Admin Panel Multiple SQL Injections

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112380. PoCs published by Karthik R.

AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in Sphider due to insufficient input sanitization. It includes example payloads for exploiting the login mechanism but lacks executable code.

Description

Sphider 1.3.x - Admin Panel Multiple SQL Injections

Exploits (1)

exploitdb WRITEUP VERIFIED

by Karthik R · textwebappsphp

https://www.exploit-db.com/exploits/35940

View Code ZIP pw:eip

The provided text describes SQL injection vulnerabilities in Sphider due to insufficient input sanitization. It includes example payloads for exploiting the login mechanism but lacks executable code.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Theoretical

Target: Sphider (version unspecified)

No auth needed

Prerequisites: Access to the Sphider login interface

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026