EIP-2026-118730

PRE-CVE

M-TECH P-Synch 6.2.5 - 'nph-psf.exe?css' Cross-Site Scripting

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118730. PoCs published by JeiAr.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in P-Synch due to inadequate filtering of HTML code from URL parameters. The example demonstrates how an attacker could inject malicious scripts via the 'css' parameter in the URL.

Description

M-TECH P-Synch 6.2.5 - 'nph-psf.exe?css' Cross-Site Scripting

Exploits (1)

exploitdb WRITEUP VERIFIED
by JeiAr · textremotewindows
https://www.exploit-db.com/exploits/22676

The provided text describes a cross-site scripting (XSS) vulnerability in P-Synch due to inadequate filtering of HTML code from URL parameters. The example demonstrates how an attacker could inject malicious scripts via the 'css' parameter in the URL.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: P-Synch (version not specified)
No auth needed
Prerequisites: Access to the target URL · Victim interaction with the crafted URL
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026