EIP-2026-107293

PRE-CVE

FTP Made Easy PRO 1.2 - Arbitrary File Download

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107293. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary This exploit demonstrates an arbitrary file download vulnerability in FTP Made Easy PRO Script v1.2. The vulnerability allows an attacker to download any file from the server by manipulating the 'id' parameter in the download.php script.

Description

FTP Made Easy PRO 1.2 - Arbitrary File Download

Exploits (1)

exploitdb WORKING POC
by Ihsan Sencan · textwebappsphp
https://www.exploit-db.com/exploits/41270

This exploit demonstrates an arbitrary file download vulnerability in FTP Made Easy PRO Script v1.2. The vulnerability allows an attacker to download any file from the server by manipulating the 'id' parameter in the download.php script.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: FTP Made Easy PRO Script v1.2
No auth needed
Prerequisites: Access to the download.php script
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026