Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112966. PoCs published by kurdish hackers team.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in Vanira CMS, where the 'vtpidshow' parameter in 'voteshow.php' is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.
Description
Vanira CMS - 'vtpidshow' SQL Injection
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by kurdish hackers team · textwebappsphp
https://www.exploit-db.com/exploits/36173
The provided text describes an SQL injection vulnerability in Vanira CMS, where the 'vtpidshow' parameter in 'voteshow.php' is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.
Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
Vanira CMS (version unspecified)
No auth needed
Prerequisites:
Access to the vulnerable endpoint · Basic knowledge of SQL injection techniques
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026