Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-105388. PoCs published by HaHwul.
AI-analyzed exploit summary This exploit demonstrates a PHP code injection and stored XSS vulnerability in BanManager WebUI 1.5.8. The vulnerability allows an attacker to inject arbitrary PHP code into the 'settings.php' file via unvalidated input parameters such as 'footer', 'buttons_before', and 'buttons_after'.
Description
BanManager WebUI 1.5.8 - PHP Code Injection
Exploits (1)
This exploit demonstrates a PHP code injection and stored XSS vulnerability in BanManager WebUI 1.5.8. The vulnerability allows an attacker to inject arbitrary PHP code into the 'settings.php' file via unvalidated input parameters such as 'footer', 'buttons_before', and 'buttons_after'.