EIP-2026-110231

PRE-CVE

Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110231. PoCs published by Yashar shahinzadeh.

AI-analyzed exploit summary The exploit demonstrates CSRF for adding/editing admin accounts, SQL injection via GET parameter, and local path disclosure in Open Real Estate CMS 1.5.1. It includes functional PoC code for these vulnerabilities.

Description

Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC
by Yashar shahinzadeh · textwebappsphp
https://www.exploit-db.com/exploits/27515

The exploit demonstrates CSRF for adding/editing admin accounts, SQL injection via GET parameter, and local path disclosure in Open Real Estate CMS 1.5.1. It includes functional PoC code for these vulnerabilities.

Classification
Working Poc 90%
Attack Type
Sqli | Auth Bypass | Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Open Real Estate CMS 1.5.1
No auth needed
Prerequisites: Target running Open Real Estate CMS 1.5.1 · Network access to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026