EIP-2026-113108

PRE-CVE

Virtual Airlines Manager 2.6.2 - 'id' SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113108. PoCs published by Mosaaed.

AI-analyzed exploit summary This exploit demonstrates SQL injection and XSS vulnerabilities in Virtual Airlines Manager 2.6.2. It includes SQLmap commands for SQL injection and XSS payloads for various parameters.

Description

Virtual Airlines Manager 2.6.2 - 'id' SQL Injection

Exploits (1)

exploitdb WORKING POC

by Mosaaed · textwebappsphp

https://www.exploit-db.com/exploits/48574

View Code ZIP pw:eip

This exploit demonstrates SQL injection and XSS vulnerabilities in Virtual Airlines Manager 2.6.2. It includes SQLmap commands for SQL injection and XSS payloads for various parameters.

Classification

Working Poc 90%

Attack Type

Sqli | Xss

Complexity

Trivial

Reliability

Reliable

Target: Virtual Airlines Manager 2.6.2

No auth needed

Prerequisites: Access to the target application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026