EIP-2026-110883

PRE-CVE

PHP-Nuke MaticMarket 2.02 - Local File Inclusion

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110883. PoCs published by xer0x.

AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in MaticMarket 2.02 for PHP Nuke. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'modulename' parameter with directory traversal sequences and a null byte.

Description

PHP-Nuke MaticMarket 2.02 - Local File Inclusion

Exploits (1)

exploitdb WORKING POC

by xer0x · textwebappsphp

https://www.exploit-db.com/exploits/15783

View Code ZIP pw:eip

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in MaticMarket 2.02 for PHP Nuke. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'modulename' parameter with directory traversal sequences and a null byte.

Classification

Working Poc 95%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: MaticMarket 2.02 for PHP Nuke

No auth needed

Prerequisites: Access to the vulnerable web application

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1083 - File and Directory Discovery

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026