EIP-2026-105542
PRE-CVEBloofoxCMS - 'index.php' Arbitrary File Upload
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-105542. PoCs published by CWH Underground.
AI-analyzed exploit summary This exploit targets an unrestricted file upload vulnerability in Bloofox CMS 0.5.0, allowing authenticated users to upload arbitrary files and achieve remote code execution. It authenticates as an admin/editor, uploads a malicious PHP shell, and provides interactive command execution.
Description
BloofoxCMS - 'index.php' Arbitrary File Upload
Exploits (1)
This exploit targets an unrestricted file upload vulnerability in Bloofox CMS 0.5.0, allowing authenticated users to upload arbitrary files and achieve remote code execution. It authenticates as an admin/editor, uploads a malicious PHP shell, and provides interactive command execution.