EIP-2026-107338
PRE-CVEGalmeta Post CMS 0.2 - Multiple Local File Inclusions
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107338. PoCs published by CWH Underground.
AI-analyzed exploit summary This exploit demonstrates multiple local file inclusion vulnerabilities in Galmeta Post CMS 0.2 via POST requests to a specific PHP test file. The attack leverages path traversal sequences to read arbitrary files (e.g., boot.ini or /etc/passwd) by manipulating form parameters.
Description
Galmeta Post CMS 0.2 - Multiple Local File Inclusions
Exploits (1)
This exploit demonstrates multiple local file inclusion vulnerabilities in Galmeta Post CMS 0.2 via POST requests to a specific PHP test file. The attack leverages path traversal sequences to read arbitrary files (e.g., boot.ini or /etc/passwd) by manipulating form parameters.