Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100400. PoCs published by Abysssec.
AI-analyzed exploit summary This advisory describes an arbitrary file upload vulnerability in Luftguitar CMS 2.0.2, allowing attackers to upload malicious files via the Image Gallery component. The uploaded files are stored in the /Images/ directory, potentially leading to remote code execution if executable files are uploaded.
Description
Luftguitar CMS - Upload Arbitrary File
Exploits (1)
This advisory describes an arbitrary file upload vulnerability in Luftguitar CMS 2.0.2, allowing attackers to upload malicious files via the Image Gallery component. The uploaded files are stored in the /Images/ directory, potentially leading to remote code execution if executable files are uploaded.