EIP-2026-110316

PRE-CVE

Openreglement 1.04 - Local File Inclusion / Remote File Inclusion

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110316. PoCs published by cr4wl3r.

AI-analyzed exploit summary This exploit demonstrates RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Openreglement 1.04. It provides multiple endpoints where an attacker can include arbitrary files, potentially leading to remote code execution.

Description

Openreglement 1.04 - Local File Inclusion / Remote File Inclusion

Exploits (1)

exploitdb WORKING POC

by cr4wl3r · textwebappsphp

https://www.exploit-db.com/exploits/12296

View Code ZIP pw:eip

This exploit demonstrates RFI (Remote File Inclusion) and LFI (Local File Inclusion) vulnerabilities in Openreglement 1.04. It provides multiple endpoints where an attacker can include arbitrary files, potentially leading to remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Openreglement 1.04

No auth needed

Prerequisites: Network access to the target application · Ability to host or reference a malicious file

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026