EIP-2026-100004

PRE-CVE

PHP Hosting Directory 2.0 - Database Disclosure

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100004. PoCs published by ZoRLu.

AI-analyzed exploit summary This exploit targets PHP Hosting Directory 2.0 by leveraging a database disclosure vulnerability. It constructs a URL to download a backup database file (backup_db_[date].sql.gz) from the target server, demonstrating an information leak vulnerability.

Description

PHP Hosting Directory 2.0 - Database Disclosure

Exploits (1)

exploitdb WORKING POC VERIFIED
by ZoRLu · pythondosaix
https://www.exploit-db.com/exploits/15264

This exploit targets PHP Hosting Directory 2.0 by leveraging a database disclosure vulnerability. It constructs a URL to download a backup database file (backup_db_[date].sql.gz) from the target server, demonstrating an information leak vulnerability.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: PHP Hosting Directory 2.0
No auth needed
Prerequisites: Target server must have the vulnerable PHP Hosting Directory 2.0 installed · Backup database files must be accessible via the constructed URL
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026