EIP-2026-100850

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100850. PoCs published by Onur Alanbel (BGA).

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Mailspect Control Panel 4.0.5, including remote code execution (RCE) via command injection in the `config_version_cmd` parameter, arbitrary file read (AFR) via path traversal in `log_file` and `log_dir` parameters, and cross-site scripting (XSS) via the `login` parameter.

Description

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC

by Onur Alanbel (BGA) · textwebappscgi

https://www.exploit-db.com/exploits/33887

View Code ZIP pw:eip

The exploit demonstrates multiple vulnerabilities in Mailspect Control Panel 4.0.5, including remote code execution (RCE) via command injection in the `config_version_cmd` parameter, arbitrary file read (AFR) via path traversal in `log_file` and `log_dir` parameters, and cross-site scripting (XSS) via the `login` parameter.

Classification

Working Poc 100%

Attack Type

Rce | Xss | Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Mailspect Control Panel 4.0.5

Auth required

Prerequisites: Authenticated access to the Mailspect Control Panel · Network access to the target system

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1005 - Data from Local System T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Exploitation Summary

Description

Exploits (1)

Details