EIP-2026-100541

PRE-CVE

SelectSurvey CMS - 'ASP.NET' Arbitrary File Upload

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100541. PoCs published by 040.

AI-analyzed exploit summary This is a writeup describing a shell upload vulnerability in SelectSurvey.NETv4 CMS (ASP.NET). It provides the path to the vulnerable upload endpoint and the location where the uploaded shell can be accessed.

Description

SelectSurvey CMS - 'ASP.NET' Arbitrary File Upload

Exploits (1)

exploitdb WRITEUP VERIFIED
by 040 · textwebappsasp
https://www.exploit-db.com/exploits/23571

This is a writeup describing a shell upload vulnerability in SelectSurvey.NETv4 CMS (ASP.NET). It provides the path to the vulnerable upload endpoint and the location where the uploaded shell can be accessed.

Classification
Writeup 80%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: SelectSurvey.NETv4 CMS (ASP.NET) versions 3.x and 4.0
No auth needed
Prerequisites: Access to the vulnerable upload endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026