Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-110961. PoCs published by Spoofed.
AI-analyzed exploit summary This exploit targets a file inclusion vulnerability in phpBB 2.0.4 by manipulating the 'install_to' parameter in admin_styles.php to traverse directories and include arbitrary files. It sends a crafted POST request to execute or retrieve the specified file.
Description
phpBB 2.0.4 - PHP Remote File Inclusion
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Spoofed · cwebappsphp
https://www.exploit-db.com/exploits/47
This exploit targets a file inclusion vulnerability in phpBB 2.0.4 by manipulating the 'install_to' parameter in admin_styles.php to traverse directories and include arbitrary files. It sends a crafted POST request to execute or retrieve the specified file.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
phpBB 2.0.4
Auth required
Prerequisites:
Access to admin_styles.php · Valid authentication credentials
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026