Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-105980. PoCs published by IHTeam.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in CMS Made Simple <= 1.6.2. The vulnerability arises from the `GetURLContent` function, which uses `file_get_contents` without proper input validation, allowing an attacker to read arbitrary files via a base64-encoded path.
Description
CMS Made Simple 1.6.2 - Local File Disclosure
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in CMS Made Simple <= 1.6.2. The vulnerability arises from the `GetURLContent` function, which uses `file_get_contents` without proper input validation, allowing an attacker to read arbitrary files via a base64-encoded path.