Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-113119. PoCs published by Ihsan Sencan.
AI-analyzed exploit summary The exploit demonstrates a SQL injection vulnerability in Vishesh Auto Index 3.1 via the 'fid' parameter in 'file.php' and 'download.php'. It uses UNION-based SQLi to extract database schema and column names.
Description
Vishesh Auto Index 3.1 - 'fid' SQL Injection
Exploits (1)
exploitdb
WORKING POC
by Ihsan Sencan · textwebappsphp
https://www.exploit-db.com/exploits/45618
The exploit demonstrates a SQL injection vulnerability in Vishesh Auto Index 3.1 via the 'fid' parameter in 'file.php' and 'download.php'. It uses UNION-based SQLi to extract database schema and column names.
Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target:
Vishesh Auto Index 3.1
No auth needed
Prerequisites:
Access to the vulnerable web application
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026