EIP-2026-104844

PRE-CVE

4Images 1.7.7 - 'image_utils.php' Remote Command Execution

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-104844. PoCs published by Sn!pEr.S!Te Hacker.

AI-analyzed exploit summary This exploit demonstrates a remote command execution vulnerability in 4images <= 1.7.7 via the 'command' parameter in 'includes/image_utils.php'. The vulnerability arises from unsanitized user input being passed to the 'system()' function.

Description

4Images 1.7.7 - 'image_utils.php' Remote Command Execution

Exploits (1)

exploitdb WORKING POC
by Sn!pEr.S!Te Hacker · textwebappsphp
https://www.exploit-db.com/exploits/12585

This exploit demonstrates a remote command execution vulnerability in 4images <= 1.7.7 via the 'command' parameter in 'includes/image_utils.php'. The vulnerability arises from unsanitized user input being passed to the 'system()' function.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: 4images <= 1.7.7
No auth needed
Prerequisites: Access to the vulnerable endpoint 'includes/image_utils.php'
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026