Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-100604. PoCs published by Abysssec.
AI-analyzed exploit summary The advisory details two vulnerabilities in Visinia 1.3: a CSRF vulnerability allowing module removal via a malicious POST request and an LFI vulnerability enabling arbitrary file download via path traversal in the 'image.axd' endpoint.
Description
visinia 1.3 - Multiple Vulnerabilities
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Abysssec · textwebappsasp
https://www.exploit-db.com/exploits/14879
The advisory details two vulnerabilities in Visinia 1.3: a CSRF vulnerability allowing module removal via a malicious POST request and an LFI vulnerability enabling arbitrary file download via path traversal in the 'image.axd' endpoint.
Classification
Writeup 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target:
Visinia 1.3
Auth required
Prerequisites:
Admin session for CSRF · Access to vulnerable endpoint for LFI
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026