CVE-2010-1114

Web Server Creator - Web Portal 0.1 - RCE

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-1114. PoCs published by indoushka.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Web Server Creator - Web Portal v0.1, including directory traversal, XSS, and RFI. It provides specific URLs to exploit these vulnerabilities.

Description

Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) pg parameter to index.php and the (2) path parameter to news/form.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by indoushka · textwebappsphp

https://www.exploit-db.com/exploits/11569

View Code ZIP pw:eip

The exploit demonstrates multiple vulnerabilities in Web Server Creator - Web Portal v0.1, including directory traversal, XSS, and RFI. It provides specific URLs to exploit these vulnerabilities.

Classification

Working Poc 90%

Attack Type

Other

Complexity

Trivial

Reliability

Reliable

Target: Web Server Creator - Web Portal v0.1

No auth needed

Prerequisites: Access to the target web server

MITRE ATT&CK

T1006 - Direct Volume Access T1059.007 - JavaScript T1189 - Drive-by Compromise

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/37841

Exploit x_refsource_misc

http://www.packetstormsecurity.com/1001-exploits/webservercreator-traversalxssrfi.txt

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/55727

Scores

EPSS 0.0299

EPSS Percentile 85.5%

Details

CWE

CWE-94

Status published

Products (1)

comscripts/web_server_creator_web_portal 0.1

Published Mar 25, 2010

Tracked Since Feb 18, 2026