EIP-2026-112483

PRE-CVE

SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112483. PoCs published by L0RD.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in SuperCom Online Shopping Ecommerce Cart 1, including persistent XSS, CSRF, and authentication bypass via SQL injection. The PoC provides clear steps and code snippets to reproduce each vulnerability.

Description

SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass

Exploits (1)

exploitdb WORKING POC
by L0RD · textwebappsphp
https://www.exploit-db.com/exploits/44639

The exploit demonstrates multiple vulnerabilities in SuperCom Online Shopping Ecommerce Cart 1, including persistent XSS, CSRF, and authentication bypass via SQL injection. The PoC provides clear steps and code snippets to reproduce each vulnerability.

Classification
Working Poc 95%
Attack Type
Xss | Auth Bypass | Other
Complexity
Trivial
Reliability
Reliable
Target: SuperCom Online Shopping Ecommerce Cart 1
No auth needed
Prerequisites: Access to the target application · User account for XSS/CSRF PoC
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026