EIP-2026-107454

PRE-CVE

Golabi CMS 1.0.1 - Session Poisoning

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107454. PoCs published by CrazyAngel.

AI-analyzed exploit summary This is a writeup describing a session poisoning vulnerability in Golabi CMS. The vulnerability allows an attacker to manipulate session variables to re-install or change configurations, potentially leading to arbitrary code execution via malicious PHP code injection.

Description

Golabi CMS 1.0.1 - Session Poisoning

Exploits (1)

exploitdb WRITEUP VERIFIED
by CrazyAngel · textwebappsphp
https://www.exploit-db.com/exploits/8585

This is a writeup describing a session poisoning vulnerability in Golabi CMS. The vulnerability allows an attacker to manipulate session variables to re-install or change configurations, potentially leading to arbitrary code execution via malicious PHP code injection.

Classification
Writeup 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Theoretical
Target: Golabi CMS >= 1.0.1
No auth needed
Prerequisites: Access to the target application's ImageVer.php endpoint
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026