Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-108029. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The exploit demonstrates a file creation and command execution vulnerability in JAF CMS 4.0 RC2 via unsanitized input in the '/module/log/vislog.php' script. It also includes a remote file inclusion vulnerability in '/module/forum/main.php' and '/module/forum/forum.php' when register_globals is enabled.
Description
JAF CMS 4.0 rc2 - Multiple Vulnerabilities
Exploits (1)
The exploit demonstrates a file creation and command execution vulnerability in JAF CMS 4.0 RC2 via unsanitized input in the '/module/log/vislog.php' script. It also includes a remote file inclusion vulnerability in '/module/forum/main.php' and '/module/forum/forum.php' when register_globals is enabled.