EIP-2026-106504

PRE-CVE

Dokeos 1.6.4 - Multiple Remote File Inclusions Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106504. PoCs published by viper-haCker.

AI-analyzed exploit summary The provided text describes multiple remote file inclusion vulnerabilities in Dokeos 1.6.3 due to improper input sanitization. It includes example URLs demonstrating how an attacker could include arbitrary remote files containing malicious PHP code.

Description

Dokeos 1.6.4 - Multiple Remote File Inclusions Vulnerabilities

Exploits (1)

exploitdb WRITEUP VERIFIED

by viper-haCker · textwebappsphp

https://www.exploit-db.com/exploits/28787

View Code ZIP pw:eip

The provided text describes multiple remote file inclusion vulnerabilities in Dokeos 1.6.3 due to improper input sanitization. It includes example URLs demonstrating how an attacker could include arbitrary remote files containing malicious PHP code.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Theoretical

Target: Dokeos 1.6.3

No auth needed

Prerequisites: Network access to the target application · Ability to host a malicious file on a remote server

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026