Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110781. PoCs published by WICS.
AI-analyzed exploit summary This exploit demonstrates a Remote Code Execution (RCE) vulnerability in PHP utility belt due to unsafe use of eval() on user-controlled input. The PoC shows how arbitrary PHP code can be executed via a POST request to ajax.php, leading to file creation and potential full system compromise.
Description
PHP Utility Belt - Remote Code Execution
Exploits (1)
This exploit demonstrates a Remote Code Execution (RCE) vulnerability in PHP utility belt due to unsafe use of eval() on user-controlled input. The PoC shows how arbitrary PHP code can be executed via a POST request to ajax.php, leading to file creation and potential full system compromise.