EIP-2026-106107
PRE-CVEComplaint Management System 4.0 - Remote Code Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106107. PoCs published by Metin Yunus Kandemir.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass via SQL injection and arbitrary file upload leading to remote code execution in Complaint Management System 4.0. It bypasses login using a SQLi payload, uploads a malicious PHP file, and executes system commands via a GET parameter.
Description
Complaint Management System 4.0 - Remote Code Execution
Exploits (1)
This exploit demonstrates an authentication bypass via SQL injection and arbitrary file upload leading to remote code execution in Complaint Management System 4.0. It bypasses login using a SQLi payload, uploads a malicious PHP file, and executes system commands via a GET parameter.