EIP-2026-107127
PRE-CVEFlatnuke 2.5.8 - 'file()' Privilege Escalation / Code Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107127. PoCs published by rgod.
AI-analyzed exploit summary This exploit targets Flatnuke <=2.5.8, leveraging a directory traversal vulnerability in the 'myforum' cookie to escalate privileges and upload a malicious .gif file containing PHP code. The exploit then renames the file to .php and executes arbitrary commands via HTTP headers.
Description
Flatnuke 2.5.8 - 'file()' Privilege Escalation / Code Execution
Exploits (1)
This exploit targets Flatnuke <=2.5.8, leveraging a directory traversal vulnerability in the 'myforum' cookie to escalate privileges and upload a malicious .gif file containing PHP code. The exploit then renames the file to .php and executes arbitrary commands via HTTP headers.