EIP-2026-110737
PRE-CVEPHP PEAR HTTP_Upload 1.0.0b3 - Arbitrary File Upload
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-110737. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This is a vulnerability writeup detailing an arbitrary file upload flaw in PEAR HTTP_Upload v1.0.0b3, where attackers can bypass file extension checks by appending '.1' to PHP files, leading to remote code execution. The advisory includes technical details, affected versions, and proof-of-concept examples.
Description
PHP PEAR HTTP_Upload 1.0.0b3 - Arbitrary File Upload
Exploits (1)
This is a vulnerability writeup detailing an arbitrary file upload flaw in PEAR HTTP_Upload v1.0.0b3, where attackers can bypass file extension checks by appending '.1' to PHP files, leading to remote code execution. The advisory includes technical details, affected versions, and proof-of-concept examples.