Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-108999. PoCs published by Himeur Nourredine.
AI-analyzed exploit summary The writeup describes a remote file inclusion vulnerability in Kietu's 'index.php' script, allowing attackers to execute arbitrary PHP scripts by manipulating the 'config.php' include path via the 'kietu[url_hit]' parameter.
Description
Kietu 2/3 - 'index.php' Remote File Inclusion
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Himeur Nourredine · textwebappsphp
https://www.exploit-db.com/exploits/23607
The writeup describes a remote file inclusion vulnerability in Kietu's 'index.php' script, allowing attackers to execute arbitrary PHP scripts by manipulating the 'config.php' include path via the 'kietu[url_hit]' parameter.
Classification
Writeup 80%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target:
Kietu (version unspecified)
No auth needed
Prerequisites:
Remote attacker-controlled server hosting a malicious 'config.php' file · Target server with vulnerable Kietu installation
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026