EIP-2026-110972

PRE-CVE

phpBB < 2.0.10 - 'Santy.A Worm' 'highlight' Arbitrary File Upload

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110972. PoCs published by anonymous.

AI-analyzed exploit summary This is a Perl-based worm (Santy.A) targeting phpBB <= 2.0.10 via a remote command execution vulnerability in the 'highlight' parameter. It propagates by exploiting vulnerable phpBB installations found via Google searches.

Description

phpBB < 2.0.10 - 'Santy.A Worm' 'highlight' Arbitrary File Upload

Exploits (1)

exploitdb WORKING POC VERIFIED
by anonymous · perlwebappsphp
https://www.exploit-db.com/exploits/702

This is a Perl-based worm (Santy.A) targeting phpBB <= 2.0.10 via a remote command execution vulnerability in the 'highlight' parameter. It propagates by exploiting vulnerable phpBB installations found via Google searches.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: phpBB <= 2.0.10
No auth needed
Prerequisites: Vulnerable phpBB installation accessible via Google search · Network connectivity to Google and target sites
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026