EIP-2026-107601
PRE-CVEhMAilServer 4.4.2 - 'PHPWebAdmin' File Inclusion
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107601. PoCs published by Nine:Situations:Group.
AI-analyzed exploit summary This exploit demonstrates local and remote file inclusion vulnerabilities in hMailServer 4.4.2's PHPWebAdmin. It leverages path traversal and improper input validation to include arbitrary files, potentially leading to remote code execution or sensitive information disclosure.
Description
hMAilServer 4.4.2 - 'PHPWebAdmin' File Inclusion
Exploits (1)
This exploit demonstrates local and remote file inclusion vulnerabilities in hMailServer 4.4.2's PHPWebAdmin. It leverages path traversal and improper input validation to include arbitrary files, potentially leading to remote code execution or sensitive information disclosure.