Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112604. PoCs published by Juan M. Natal.
AI-analyzed exploit summary The provided code demonstrates multiple SQL injection vulnerabilities in TestLink by injecting malicious SQL queries into various endpoints. The payloads include boolean-based and time-based SQLi techniques to exploit unsanitized input parameters.
Description
TestLink - Multiple SQL Injections
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Juan M. Natal · textwebappsphp
https://www.exploit-db.com/exploits/36852
The provided code demonstrates multiple SQL injection vulnerabilities in TestLink by injecting malicious SQL queries into various endpoints. The payloads include boolean-based and time-based SQLi techniques to exploit unsanitized input parameters.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
TestLink (version not specified)
No auth needed
Prerequisites:
Access to the vulnerable TestLink instance
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026