EIP-2026-106606

PRE-CVE

dynamic flash forum 1.0 Beta - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106606. PoCs published by Salvatore Fresta.

AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in Dynamic Flash Forum 1.0 Beta, including information disclosure via an accessible config file, authentication bypass via SQL injection, and multiple SQL injection points in various PHP files. The provided payloads are functional and directly exploitable under specific conditions (e.g., magic_quotes_gpc = off).

Description

dynamic flash forum 1.0 Beta - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by Salvatore Fresta · textwebappsphp
https://www.exploit-db.com/exploits/8387

This exploit demonstrates multiple vulnerabilities in Dynamic Flash Forum 1.0 Beta, including information disclosure via an accessible config file, authentication bypass via SQL injection, and multiple SQL injection points in various PHP files. The provided payloads are functional and directly exploitable under specific conditions (e.g., magic_quotes_gpc = off).

Classification
Working Poc 90%
Attack Type
Sqli | Auth Bypass | Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Dynamic Flash Forum 1.0 Beta
No auth needed
Prerequisites: magic_quotes_gpc = off · access to vulnerable endpoints
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026