EIP-2026-106838

PRE-CVE

eLitius 1.0 - '/manage-admin.php' Arbitrary Add Admin/Change Password

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106838. PoCs published by ThE g0bL!N.

AI-analyzed exploit summary This exploit is an HTML form designed to change the admin password of eLitius Version 1.0 by submitting a POST request to the vulnerable endpoint. It includes default credentials and a pre-filled form to facilitate unauthorized password changes.

Description

eLitius 1.0 - '/manage-admin.php' Arbitrary Add Admin/Change Password

Exploits (1)

exploitdb WORKING POC VERIFIED
by ThE g0bL!N · htmlwebappsphp
https://www.exploit-db.com/exploits/8459

This exploit is an HTML form designed to change the admin password of eLitius Version 1.0 by submitting a POST request to the vulnerable endpoint. It includes default credentials and a pre-filled form to facilitate unauthorized password changes.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: eLitius Version 1.0
No auth needed
Prerequisites: Access to the admin interface · Knowledge of the target endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026