Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-105794. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This is a detailed technical writeup describing a PHP command injection vulnerability in CF Image Host 1.65-1.6.6. The vulnerability allows authenticated attackers to inject malicious PHP code into the 'Site Title' or 'Site Slogan' fields, which is then stored in 'set.php' and executed when certain tabs are accessed.
Description
CF Image Host 1.65 - PHP Command Injection
Exploits (1)
This is a detailed technical writeup describing a PHP command injection vulnerability in CF Image Host 1.65-1.6.6. The vulnerability allows authenticated attackers to inject malicious PHP code into the 'Site Title' or 'Site Slogan' fields, which is then stored in 'set.php' and executed when certain tabs are accessed.