Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-106354. PoCs published by cr4wl3r.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in DasForum 0.0.1 due to improper input validation in the 'layout' parameter of bbcode_inputs.php. The PoC shows how an attacker can include arbitrary local files by appending a null byte (%00) to bypass file extension checks.
Description
DasForum - 'layout' Local File Inclusion
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in DasForum 0.0.1 due to improper input validation in the 'layout' parameter of bbcode_inputs.php. The PoC shows how an attacker can include arbitrary local files by appending a null byte (%00) to bypass file extension checks.