EIP-2026-102117

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102117. PoCs published by Vulnerability-Lab.

AI-analyzed exploit summary The document describes multiple vulnerabilities in Wifi Photo Transfer 2.1 & 1.1 Pro, including command injection via album names, file inclusion/arbitrary upload via POST requests, information disclosure via misconfigured file access, and client-side XSS via manipulated filenames. No actual exploit code is provided, only detailed descriptions and manual reproduction steps.

Description

Wifi Photo Transfer 2.1/1.1 PRO - Multiple Vulnerabilities

Exploits (1)

exploitdb WRITEUP

by Vulnerability-Lab · textwebappshardware

https://www.exploit-db.com/exploits/25413

View Code ZIP pw:eip

The document describes multiple vulnerabilities in Wifi Photo Transfer 2.1 & 1.1 Pro, including command injection via album names, file inclusion/arbitrary upload via POST requests, information disclosure via misconfigured file access, and client-side XSS via manipulated filenames. No actual exploit code is provided, only detailed descriptions and manual reproduction steps.

Classification

Writeup 90%

Attack Type

Rce | Info Leak | Xss | Other

Complexity

Moderate

Reliability

Theoretical

Target: Wifi Photo Transfer 2.1 & 1.1 Pro

No auth needed

Prerequisites: Network access to the vulnerable application · Ability to modify album names or send crafted POST requests

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1006 - Direct Volume Access T1055 - Process Injection

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Wifi Photo Transfer 2.1/1.1 PRO - Multiple Vulnerabilities

Exploitation Summary

Description

Exploits (1)

Details