Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107301. PoCs published by Curesec Research Team.
AI-analyzed exploit summary This is a security advisory detailing a Local File Inclusion (LFI) vulnerability in FUDforum 3.0.6. The vulnerability allows an attacker with admin credentials to read arbitrary files via directory traversal in the 'file' parameter of the hlplist.php script.
Description
FUDforum 3.0.6 - Local File Inclusion
Exploits (1)
exploitdb
WRITEUP
by Curesec Research Team · textwebappsphp
https://www.exploit-db.com/exploits/40803
This is a security advisory detailing a Local File Inclusion (LFI) vulnerability in FUDforum 3.0.6. The vulnerability allows an attacker with admin credentials to read arbitrary files via directory traversal in the 'file' parameter of the hlplist.php script.
Classification
Writeup 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
FUDforum 3.0.6
Auth required
Prerequisites:
Admin credentials · Access to the hlplist.php script
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026