Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110601. PoCs published by Joao Gouveia.
AI-analyzed exploit summary The exploit describes a local file inclusion vulnerability in Phorum due to improper input validation in the 'common.php' file. An attacker can manipulate the 'f' parameter to include arbitrary PHP files, potentially exposing sensitive information such as database credentials.
Description
Phorum 3.x - PHP Configuration Disclosure
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Joao Gouveia · textwebappsphp
https://www.exploit-db.com/exploits/20428
The exploit describes a local file inclusion vulnerability in Phorum due to improper input validation in the 'common.php' file. An attacker can manipulate the 'f' parameter to include arbitrary PHP files, potentially exposing sensitive information such as database credentials.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
Phorum (version not specified)
No auth needed
Prerequisites:
Access to the target web application
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026