EIP-2026-112571

PRE-CVE

TCMS - Multiple Input Validation Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112571. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in TCMS, including SQL injection, XSS, and local file inclusion. It provides specific HTTP requests and form submissions to exploit these vulnerabilities.

Description

TCMS - Multiple Input Validation Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by High-Tech Bridge SA · textwebappsphp

https://www.exploit-db.com/exploits/34534

View Code ZIP pw:eip

The exploit demonstrates multiple vulnerabilities in TCMS, including SQL injection, XSS, and local file inclusion. It provides specific HTTP requests and form submissions to exploit these vulnerabilities.

Classification

Working Poc 90%

Attack Type

Sqli | Xss | Info Leak

Complexity

Trivial

Reliability

Reliable

Target: TCMS (version not specified)

No auth needed

Prerequisites: Access to the target web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1189 - Drive-by Compromise

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026