EIP-2026-100286
PRE-CVEDUWare Multiple Products - Multiple Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100286. PoCs published by GulfTech Security.
AI-analyzed exploit summary This writeup details multiple vulnerabilities in DUWare products, including arbitrary file upload, script execution, account hijacking, privilege escalation, and query tampering. The vulnerabilities stem from poor security practices such as lack of input validation, reliance on client-side validation, and plaintext password storage.
Description
DUWare Multiple Products - Multiple Vulnerabilities
Exploits (1)
This writeup details multiple vulnerabilities in DUWare products, including arbitrary file upload, script execution, account hijacking, privilege escalation, and query tampering. The vulnerabilities stem from poor security practices such as lack of input validation, reliance on client-side validation, and plaintext password storage.