Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107389. PoCs published by Batch.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in GetSimple CMS 2.01. It allows an authenticated admin to read arbitrary files on the server by manipulating the 'file' parameter in the download.php script.
Description
Getsimple CMS 2.01 - Local File Inclusion
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Batch · textwebappsphp
https://www.exploit-db.com/exploits/12517
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in GetSimple CMS 2.01. It allows an authenticated admin to read arbitrary files on the server by manipulating the 'file' parameter in the download.php script.
Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
GetSimple CMS 2.01
Auth required
Prerequisites:
Admin access to the GetSimple CMS
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026