EIP-2026-107020

PRE-CVE

F3Site 2011 alfa 1 - Cross-Site Scripting / Cross-Site Request Forgery

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107020. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in F3Site, including CSRF and Stored XSS. It provides functional PoC code for each vulnerability, showing how an attacker can manipulate HTTP requests to exploit these flaws.

Description

F3Site 2011 alfa 1 - Cross-Site Scripting / Cross-Site Request Forgery

Exploits (1)

exploitdb WORKING POC VERIFIED

by High-Tech Bridge SA · textwebappsphp

https://www.exploit-db.com/exploits/15920

View Code ZIP pw:eip

The exploit demonstrates multiple vulnerabilities in F3Site, including CSRF and Stored XSS. It provides functional PoC code for each vulnerability, showing how an attacker can manipulate HTTP requests to exploit these flaws.

Classification

Working Poc 100%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: F3Site 2011 alfa 1 and prior versions

No auth needed

Prerequisites: Access to the vulnerable application · Ability to craft malicious HTTP requests

MITRE ATT&CK

T1189 - Drive-by Compromise T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026