EIP-2026-108935
PRE-CVEJudging Management System v1.0 - Remote Code Execution (RCE)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-108935. PoCs published by Angelo Pio Amirante.
AI-analyzed exploit summary This exploit demonstrates a Remote Code Execution (RCE) vulnerability in Judging Management System v1.0 by chaining an authentication bypass (SQL injection) with an unrestricted file upload. It uploads a malicious PHP shell and triggers a reverse shell via PowerShell.
Description
Judging Management System v1.0 - Remote Code Execution (RCE)
Exploits (1)
This exploit demonstrates a Remote Code Execution (RCE) vulnerability in Judging Management System v1.0 by chaining an authentication bypass (SQL injection) with an unrestricted file upload. It uploads a malicious PHP shell and triggers a reverse shell via PowerShell.