EIP-2026-106763
PRE-CVEecshop 2.6.2 - Multiple Remote Command Execution Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106763. PoCs published by Securitylab.ir.
AI-analyzed exploit summary This exploit demonstrates a file inclusion vulnerability in ecshop 2.6.2, allowing arbitrary PHP code execution via manipulated `del_list`, `rename_list`, or `ignore_list` parameters in the `integrate.php` script. The PoC shows how an attacker can inject malicious PHP code into a log file, which is then executed by the server.
Description
ecshop 2.6.2 - Multiple Remote Command Execution Vulnerabilities
Exploits (1)
This exploit demonstrates a file inclusion vulnerability in ecshop 2.6.2, allowing arbitrary PHP code execution via manipulated `del_list`, `rename_list`, or `ignore_list` parameters in the `integrate.php` script. The PoC shows how an attacker can inject malicious PHP code into a log file, which is then executed by the server.