Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112386. PoCs published by Easy Laster.
AI-analyzed exploit summary This is a proof-of-concept for a SQL injection vulnerability in spidaNews V.1.0. The exploit demonstrates how an attacker can inject malicious SQL queries via the 'id' parameter in news.php to extract database information such as version and user details.
Description
spidaNews 1.0 - 'news.php?id' SQL Injection
Exploits (1)
exploitdb
WORKING POC
by Easy Laster · textwebappsphp
https://www.exploit-db.com/exploits/17100
This is a proof-of-concept for a SQL injection vulnerability in spidaNews V.1.0. The exploit demonstrates how an attacker can inject malicious SQL queries via the 'id' parameter in news.php to extract database information such as version and user details.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
spidaNews V.1.0
No auth needed
Prerequisites:
Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026