EIP-2026-108634

PRE-CVE

Joomla! Component EContent - Local File Inclusion

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108634. PoCs published by Chip d3 bi0s.

AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla EContent component (version 1.0.1). The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.

Description

Joomla! Component EContent - Local File Inclusion

Exploits (1)

exploitdb WORKING POC VERIFIED

by Chip d3 bi0s · textwebappsphp

https://www.exploit-db.com/exploits/11996

View Code ZIP pw:eip

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla EContent component (version 1.0.1). The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Joomla EContent Component 1.0.1

No auth needed

Prerequisites: Joomla with EContent component installed · Access to the vulnerable URL path

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1083 - File and Directory Discovery

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026