EIP-2026-102278

PRE-CVE

Photo WiFi Transfer 1.01 - Directory Traversal

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102278. PoCs published by Vulnerability-Lab.

AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in Photo WiFi Transfer 1.01, allowing remote attackers to access sensitive files outside the intended directory via crafted FTP requests. The PoC includes Perl, HTML, and JavaScript examples to exploit the flaw.

Description

Photo WiFi Transfer 1.01 - Directory Traversal

Exploits (1)

exploitdb WORKING POC
by Vulnerability-Lab · textwebappsios
https://www.exploit-db.com/exploits/34243

The exploit demonstrates a directory traversal vulnerability in Photo WiFi Transfer 1.01, allowing remote attackers to access sensitive files outside the intended directory via crafted FTP requests. The PoC includes Perl, HTML, and JavaScript examples to exploit the flaw.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Photo WiFi Transfer v1.01
No auth needed
Prerequisites: Network access to the vulnerable FTP service on port 8080
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026