EIP-2026-112863

PRE-CVE

Uiga Personal Portal - Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112863. PoCs published by Eyup CELIK.

AI-analyzed exploit summary The exploit demonstrates Blind SQL Injection and XSS vulnerabilities in Uiga Personal Portal by providing specific payloads and vulnerable endpoints. It includes functional examples for both attack types.

Description

Uiga Personal Portal - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by Eyup CELIK · textwebappsphp

https://www.exploit-db.com/exploits/18002

View Code ZIP pw:eip

The exploit demonstrates Blind SQL Injection and XSS vulnerabilities in Uiga Personal Portal by providing specific payloads and vulnerable endpoints. It includes functional examples for both attack types.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Uiga Personal Portal (All Versions)

No auth needed

Prerequisites: Access to vulnerable endpoints

MITRE ATT&CK

T1189 - Drive-by Compromise T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026