EIP-2026-106260
PRE-CVECSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106260. PoCs published by faisalfs10x.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file deletion vulnerability in CSZ CMS 1.2.9, where unsanitized user input in the 'del_file' and 'del_file2' parameters allows deletion of any file accessible by the PHP process. The PoC includes HTTP requests showing how to delete files like 'conf_secret_file.php' and 'config_backup.txt' via directory traversal.
Description
CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion
Exploits (1)
This exploit demonstrates an arbitrary file deletion vulnerability in CSZ CMS 1.2.9, where unsanitized user input in the 'del_file' and 'del_file2' parameters allows deletion of any file accessible by the PHP process. The PoC includes HTTP requests showing how to delete files like 'conf_secret_file.php' and 'config_backup.txt' via directory traversal.