EIP-2026-110523

PRE-CVE

PBLang Bulletin Board System 4.x - 'SendPM.php' Directory Traversal

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110523. PoCs published by Raven.

AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in PBLang, allowing an attacker to access sensitive files such as user account information and password hashes by manipulating the 'orig' parameter in the URL.

Description

PBLang Bulletin Board System 4.x - 'SendPM.php' Directory Traversal

Exploits (1)

exploitdb WORKING POC VERIFIED
by Raven · textwebappsphp
https://www.exploit-db.com/exploits/25176

The exploit demonstrates a directory traversal vulnerability in PBLang, allowing an attacker to access sensitive files such as user account information and password hashes by manipulating the 'orig' parameter in the URL.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: PBLang
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026