EIP-2026-109210
PRE-CVELot Reservation Management System - Unauthenticated File Disclosure
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109210. PoCs published by Elijah Mandila Syoyi.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated PHP source code disclosure vulnerability via the `php://filter` wrapper, allowing attackers to read sensitive files within and outside the web root. The PoC includes HTTP requests to retrieve base64-encoded content of files like `admin/db_connect` and arbitrary files via path traversal.
Description
Lot Reservation Management System - Unauthenticated File Disclosure
Exploits (1)
This exploit demonstrates an unauthenticated PHP source code disclosure vulnerability via the `php://filter` wrapper, allowing attackers to read sensitive files within and outside the web root. The PoC includes HTTP requests to retrieve base64-encoded content of files like `admin/db_connect` and arbitrary files via path traversal.