EIP-2026-109204
PRE-CVELogin-Reg Members Management PHP 1.0 - Arbitrary File Upload
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109204. PoCs published by Ihsan Sencan.
AI-analyzed exploit summary The exploit describes an arbitrary file upload vulnerability in Login-Reg Members Management PHP 1.0, where the application fails to validate file types during profile picture uploads, allowing attackers to upload malicious files. The proof of concept outlines the vulnerable code path and demonstrates how an attacker can exploit this to achieve remote code execution.
Description
Login-Reg Members Management PHP 1.0 - Arbitrary File Upload
Exploits (1)
The exploit describes an arbitrary file upload vulnerability in Login-Reg Members Management PHP 1.0, where the application fails to validate file types during profile picture uploads, allowing attackers to upload malicious files. The proof of concept outlines the vulnerable code path and demonstrates how an attacker can exploit this to achieve remote code execution.