EIP-2026-107139
PRE-CVEFlatpress 0.804 < 0.812.1 - Local File Inclusion
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107139. PoCs published by Giuseppe Fuggiano.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in FlatPress versions 0.804-0.812.1, which can be leveraged to achieve Remote Command Execution (RCE). The exploit crafts a malicious comment with PHP shell code, exploits the LFI in the user_get() function, and establishes a remote command session.
Description
Flatpress 0.804 < 0.812.1 - Local File Inclusion
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in FlatPress versions 0.804-0.812.1, which can be leveraged to achieve Remote Command Execution (RCE). The exploit crafts a malicious comment with PHP shell code, exploits the LFI in the user_get() function, and establishes a remote command session.