EIP-2026-105371
PRE-CVEBack-End CMS 0.7.2.1 - 'jpcache.php' Remote File Inclusion
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-105371. PoCs published by Federico Fazzi.
AI-analyzed exploit summary This exploit demonstrates a remote command execution vulnerability in Back-end 0.7.2.1 by manipulating the `_PSL[classdir]` parameter in `jpcache.php` to include a remote PHP file. The PoC shows how an attacker can execute arbitrary commands by setting the parameter to a malicious URL.
Description
Back-End CMS 0.7.2.1 - 'jpcache.php' Remote File Inclusion
Exploits (1)
This exploit demonstrates a remote command execution vulnerability in Back-end 0.7.2.1 by manipulating the `_PSL[classdir]` parameter in `jpcache.php` to include a remote PHP file. The PoC shows how an attacker can execute arbitrary commands by setting the parameter to a malicious URL.