Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102351. PoCs published by LiquidWorm.
AI-analyzed exploit summary The document describes an XPath injection vulnerability in Ametys CMS 3.5.2, where the 'lang' POST parameter in the newsletter plugin is not properly sanitized, allowing arbitrary XPath code injection. The provided HTTP request demonstrates the exploit, triggering an internal server error with a detailed XPath parsing exception.
Description
Ametys CMS 3.5.2 - 'lang' XPath Injection
Exploits (1)
The document describes an XPath injection vulnerability in Ametys CMS 3.5.2, where the 'lang' POST parameter in the newsletter plugin is not properly sanitized, allowing arbitrary XPath code injection. The provided HTTP request demonstrates the exploit, triggering an internal server error with a detailed XPath parsing exception.