EIP-2026-100099
PRE-CVEAcuity CMS 2.6.2 - '/admin/file_manager/file_upload_submit.asp' Multiple Arbitrary File Upload / Code Executions
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100099. PoCs published by Aung Khant.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file upload vulnerability in Acuity CMS 2.6.2, allowing an attacker to upload and execute malicious ASP code on the server. The PoC includes a multipart form data request that bypasses restrictions to upload a file with executable content.
Description
Acuity CMS 2.6.2 - '/admin/file_manager/file_upload_submit.asp' Multiple Arbitrary File Upload / Code Executions
Exploits (1)
This exploit demonstrates an arbitrary file upload vulnerability in Acuity CMS 2.6.2, allowing an attacker to upload and execute malicious ASP code on the server. The PoC includes a multipart form data request that bypasses restrictions to upload a file with executable content.