Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114456. PoCs published by frog.
AI-analyzed exploit summary The provided text describes SQL injection and input validation vulnerabilities in Xoops, specifically in the banners.php file. It includes example URLs demonstrating how an attacker could manipulate SQL queries and banner URLs.
Description
Xoops 1.3.x/2.0.x - Multiple Vulnerabilities
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by frog · textwebappsphp
https://www.exploit-db.com/exploits/23416
The provided text describes SQL injection and input validation vulnerabilities in Xoops, specifically in the banners.php file. It includes example URLs demonstrating how an attacker could manipulate SQL queries and banner URLs.
Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
Xoops (version not specified)
No auth needed
Prerequisites:
Access to the vulnerable Xoops instance
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026