Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107184. PoCs published by Rafay Baloch.
AI-analyzed exploit summary The exploit demonstrates a local file inclusion (LFI) vulnerability in Fork CMS by manipulating the 'file' parameter in a GET request to traverse directories and access sensitive files like '/etc/passwd'. The vulnerability arises from insufficient input sanitization in the 'frontend/js.php' endpoint.
Description
Fork CMS - 'js.php' Local File Inclusion
Exploits (1)
The exploit demonstrates a local file inclusion (LFI) vulnerability in Fork CMS by manipulating the 'file' parameter in a GET request to traverse directories and access sensitive files like '/etc/passwd'. The vulnerability arises from insufficient input sanitization in the 'frontend/js.php' endpoint.