EIP-2026-105119
PRE-CVEAlphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution (File Upload + SQL injection)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-105119. PoCs published by Christian Vierschilling.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated remote code execution vulnerability in Alphaware E-Commerce System 1.0 by combining a file upload vulnerability with SQL injection to retrieve the randomized name of the uploaded PHP shell. The exploit uploads a reverse shell payload and triggers it via SQL injection.
Description
Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution (File Upload + SQL injection)
Exploits (1)
This exploit demonstrates an unauthenticated remote code execution vulnerability in Alphaware E-Commerce System 1.0 by combining a file upload vulnerability with SQL injection to retrieve the randomized name of the uploaded PHP shell. The exploit uploads a reverse shell payload and triggers it via SQL injection.