EIP-2026-105329

PRE-CVE

AvailScript Classmate Script - Arbitrary File Upload

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105329. PoCs published by S.W.A.T..

AI-analyzed exploit summary This is a writeup describing a remote file upload vulnerability in Availscript Classmate Script, allowing an attacker to upload a malicious PHP shell during registration. The exploit involves registering with a shell filename and accessing it via a predictable URL pattern.

Description

AvailScript Classmate Script - Arbitrary File Upload

Exploits (1)

exploitdb WRITEUP VERIFIED
by S.W.A.T. · textwebappsphp
https://www.exploit-db.com/exploits/7457

This is a writeup describing a remote file upload vulnerability in Availscript Classmate Script, allowing an attacker to upload a malicious PHP shell during registration. The exploit involves registering with a shell filename and accessing it via a predictable URL pattern.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Availscript Classmate Script
Auth required
Prerequisites: Access to the registration page · Ability to upload a file with a PHP extension
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026