EIP-2026-106729

PRE-CVE

EasyPHP - '/index.php' Authentication Bypass / Remote PHP Code Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106729. PoCs published by KedAns-Dz.

AI-analyzed exploit summary The provided text describes an authentication bypass and PHP code execution vulnerability in EasyPHP 12.1. It includes example URLs demonstrating the vulnerability but lacks functional exploit code.

Description

EasyPHP - '/index.php' Authentication Bypass / Remote PHP Code Injection

Exploits (1)

exploitdb WRITEUP VERIFIED
by KedAns-Dz · textwebappsphp
https://www.exploit-db.com/exploits/38438

The provided text describes an authentication bypass and PHP code execution vulnerability in EasyPHP 12.1. It includes example URLs demonstrating the vulnerability but lacks functional exploit code.

Classification
Writeup 80%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Theoretical
Target: EasyPHP 12.1
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026