EIP-2026-106915

PRE-CVE

Esvon Classifieds 4.0 - Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-106915. PoCs published by Sn!pEr.S!Te.

AI-analyzed exploit summary This exploit demonstrates Remote Command Execution (RCE) and Remote File Inclusion (RFI) vulnerabilities in Esvon Classifieds 4.0. It leverages improper input validation in `pdo.inc.php` and `class.phpmailer.php` to execute arbitrary commands or include remote files.

Description

Esvon Classifieds 4.0 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC

by Sn!pEr.S!Te · textwebappsphp

https://www.exploit-db.com/exploits/14817

View Code ZIP pw:eip

This exploit demonstrates Remote Command Execution (RCE) and Remote File Inclusion (RFI) vulnerabilities in Esvon Classifieds 4.0. It leverages improper input validation in `pdo.inc.php` and `class.phpmailer.php` to execute arbitrary commands or include remote files.

Classification

Working Poc 90%

Attack Type

Rce | Rfi

Complexity

Trivial

Reliability

Reliable

Target: Esvon Classifieds 4.0

No auth needed

Prerequisites: Network access to the target application · Vulnerable version of Esvon Classifieds installed

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026