EIP-2026-119117

PRE-CVE

Savant Web Server 3.1 - CGITest.HTML Cross-Site Scripting

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119117. PoCs published by dr_insane.

AI-analyzed exploit summary The exploit demonstrates a cross-site scripting (XSS) vulnerability in cgitest.html due to insufficient input sanitization. It provides two example URLs that inject malicious JavaScript to either redirect users or steal cookies.

Description

Savant Web Server 3.1 - CGITest.HTML Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC VERIFIED

by dr_insane · textremotewindows

https://www.exploit-db.com/exploits/22944

View Code ZIP pw:eip

The exploit demonstrates a cross-site scripting (XSS) vulnerability in cgitest.html due to insufficient input sanitization. It provides two example URLs that inject malicious JavaScript to either redirect users or steal cookies.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: cgitest.html (version unspecified)

No auth needed

Prerequisites: Victim must visit a crafted URL

MITRE ATT&CK

T1059.007 - JavaScript

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026