Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-106874. PoCs published by s4r4d0.
AI-analyzed exploit summary This is a writeup describing a Local File Inclusion (LFI) vulnerability in Endonesia 8.4 CMS. The vulnerability arises from improper input validation in the mod.php file, allowing attackers to traverse directories and include arbitrary files such as /proc/self/environ.
Description
eNdonesia CMS 8.4 - Local File Inclusion
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by s4r4d0 · textwebappsphp
https://www.exploit-db.com/exploits/9880
This is a writeup describing a Local File Inclusion (LFI) vulnerability in Endonesia 8.4 CMS. The vulnerability arises from improper input validation in the mod.php file, allowing attackers to traverse directories and include arbitrary files such as /proc/self/environ.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
Endonesia CMS 8.4
No auth needed
Prerequisites:
magic_quotes_gpc disabled on the target server
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026