EIP-2026-109211

PRE-CVE

Lot Reservation Management System - Unauthenticated File Upload and Remote Code Execution

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109211. PoCs published by Elijah Mandila Syoyi.

AI-analyzed exploit summary This exploit demonstrates an unauthenticated file upload vulnerability in the Lot Reservation Management System, allowing an attacker to upload a malicious PHP file and achieve remote code execution. The uploaded file is accessible via an open directory listing, enabling execution.

Description

Lot Reservation Management System - Unauthenticated File Upload and Remote Code Execution

Exploits (1)

exploitdb WORKING POC
by Elijah Mandila Syoyi · textwebappsphp
https://www.exploit-db.com/exploits/51860

This exploit demonstrates an unauthenticated file upload vulnerability in the Lot Reservation Management System, allowing an attacker to upload a malicious PHP file and achieve remote code execution. The uploaded file is accessible via an open directory listing, enabling execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Lot Reservation Management System 1.0
No auth needed
Prerequisites: Network access to the target application · PHP environment on the server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026