EIP-2026-113107

PRE-CVE

Virtual Airlines Manager 2.6.2 - 'airport' SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113107. PoCs published by Kostadin Tonev.

AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in Virtual Airlines Manager 2.6.2 via multiple GET parameters. It provides clear PoC URLs for each vulnerable parameter, allowing direct testing of the SQLi flaws.

Description

Virtual Airlines Manager 2.6.2 - 'airport' SQL Injection

Exploits (1)

exploitdb WORKING POC
by Kostadin Tonev · textwebappsphp
https://www.exploit-db.com/exploits/48567

The exploit demonstrates SQL injection vulnerabilities in Virtual Airlines Manager 2.6.2 via multiple GET parameters. It provides clear PoC URLs for each vulnerable parameter, allowing direct testing of the SQLi flaws.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Virtual Airlines Manager 2.6.2
No auth needed
Prerequisites: Access to the target application's web interface
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026