EIP-2026-100860
PRE-CVEmnoGoSearch 3.3.12 (search.cgi) - Arbitrary File Read
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-100860. PoCs published by Sergey Bobrov.
AI-analyzed exploit summary This advisory describes an arbitrary file reading vulnerability in mnoGoSearch 3.3.12 and earlier, where the 'd' parameter can be manipulated to include arbitrary files via template injection. The exploit leverages the QUERY_STRING and PATH_INFO to read sensitive files like /etc/passwd.
Description
mnoGoSearch 3.3.12 (search.cgi) - Arbitrary File Read
Exploits (1)
This advisory describes an arbitrary file reading vulnerability in mnoGoSearch 3.3.12 and earlier, where the 'd' parameter can be manipulated to include arbitrary files via template injection. The exploit leverages the QUERY_STRING and PATH_INFO to read sensitive files like /etc/passwd.