Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110266. PoCs published by waraxe.
AI-analyzed exploit summary The exploit demonstrates a Local File Inclusion (LFI) vulnerability in OpenCart 1.5.2.1 via directory traversal using backslashes on Windows systems, and an Arbitrary File Upload vulnerability by bypassing file extension checks with null bytes. Both vulnerabilities can lead to remote code execution under specific conditions.
Description
opencart 1.5.2.1 - Multiple Vulnerabilities
Exploits (1)
The exploit demonstrates a Local File Inclusion (LFI) vulnerability in OpenCart 1.5.2.1 via directory traversal using backslashes on Windows systems, and an Arbitrary File Upload vulnerability by bypassing file extension checks with null bytes. Both vulnerabilities can lead to remote code execution under specific conditions.