Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-106788. PoCs published by Filippo Roncari.
AI-analyzed exploit summary This is a detailed technical writeup describing a PHP Object Injection vulnerability in eFront 3.6.15, caused by unsafe use of unserialize() in the copy.php script. The vulnerability allows authenticated professors to inject malicious serialized objects via the 'transfered' parameter, though exploitation is limited due to lack of useful magic methods.
Description
eFront 3.6.15 - PHP Object Injection
Exploits (1)
This is a detailed technical writeup describing a PHP Object Injection vulnerability in eFront 3.6.15, caused by unsafe use of unserialize() in the copy.php script. The vulnerability allows authenticated professors to inject malicious serialized objects via the 'transfered' parameter, though exploitation is limited due to lack of useful magic methods.