EIP-2026-113349

PRE-CVE

Website Broker Script 3.02 - 'view' SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113349. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Website Broker Script v3.02, allowing an attacker to extract sensitive information such as admin credentials from the database. The PoC includes specific SQLi payloads targeting the 'website_details_view.php' script.

Description

Website Broker Script 3.02 - 'view' SQL Injection

Exploits (1)

exploitdb WORKING POC

by Ihsan Sencan · textwebappsphp

https://www.exploit-db.com/exploits/41539

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in Website Broker Script v3.02, allowing an attacker to extract sensitive information such as admin credentials from the database. The PoC includes specific SQLi payloads targeting the 'website_details_view.php' script.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Website Broker Script v3.02

No auth needed

Prerequisites: Access to the vulnerable endpoint · Basic knowledge of SQL injection techniques

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026