EIP-2026-106879
PRE-CVEeNews 0.1 - 'delete.php' Arbitrary Delete Post
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106879. PoCs published by ilker Kandemir.
AI-analyzed exploit summary This exploit demonstrates an arbitrary post deletion vulnerability in eNews 0.1 due to improper input validation in the 'delete.php' script. The vulnerability allows an attacker to delete any post by manipulating the 'delete' parameter in the URL.
Description
eNews 0.1 - 'delete.php' Arbitrary Delete Post
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by ilker Kandemir · textwebappsphp
https://www.exploit-db.com/exploits/5882
This exploit demonstrates an arbitrary post deletion vulnerability in eNews 0.1 due to improper input validation in the 'delete.php' script. The vulnerability allows an attacker to delete any post by manipulating the 'delete' parameter in the URL.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
eNews 0.1
No auth needed
Prerequisites:
Access to the 'delete.php' script on the target server
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026