EIP-2026-113110

PRE-CVE

Virtual Airlines Manager 2.6.2 - 'notam' SQL Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113110. PoCs published by Pankaj Kumar Thakur.

AI-analyzed exploit summary This is a writeup describing a SQL injection vulnerability in Virtual Airlines Manager 2.6.2. The 'notam_id' parameter is vulnerable to SQLi due to direct insertion into SQL queries without sanitization.

Description

Virtual Airlines Manager 2.6.2 - 'notam' SQL Injection

Exploits (1)

exploitdb WRITEUP
by Pankaj Kumar Thakur · textwebappsphp
https://www.exploit-db.com/exploits/48562

This is a writeup describing a SQL injection vulnerability in Virtual Airlines Manager 2.6.2. The 'notam_id' parameter is vulnerable to SQLi due to direct insertion into SQL queries without sanitization.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Virtual Airlines Manager 2.6.2
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026