Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110243. PoCs published by Nikola Petrov.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Open-Realty 2.5.7, allowing arbitrary file inclusion via the 'select_users_lang' parameter. It also describes a method to achieve Remote Code Execution (RCE) by uploading a malicious image containing PHP code.
Description
Open-Realty 2.5.7 - Local File Disclosure
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Open-Realty 2.5.7, allowing arbitrary file inclusion via the 'select_users_lang' parameter. It also describes a method to achieve Remote Code Execution (RCE) by uploading a malicious image containing PHP code.