Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-109845. PoCs published by ThE g0bL!N.
AI-analyzed exploit summary This exploit demonstrates a remote command injection vulnerability in NC GBook 1.0 by injecting PHP code into the 'Autor', 'E-Mail', and 'Homepage' fields, which then reads the configuration file. The PoC is straightforward and relies on user input being processed as executable code.
Description
NC GBook 1.0 - Remote Command Injection
Exploits (1)
This exploit demonstrates a remote command injection vulnerability in NC GBook 1.0 by injecting PHP code into the 'Autor', 'E-Mail', and 'Homepage' fields, which then reads the configuration file. The PoC is straightforward and relies on user input being processed as executable code.