EIP-2026-111062

PRE-CVE

phpg 1.6 - Cross-Site Scripting / Full Path Disclosure / Denial of Service

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111062. PoCs published by Anarchy Angel.

AI-analyzed exploit summary This writeup describes multiple vulnerabilities in PHPg 1.6, including XSS, path disclosure, and DoS. It provides URLs and methods to exploit these vulnerabilities but does not include executable code.

Description

phpg 1.6 - Cross-Site Scripting / Full Path Disclosure / Denial of Service

Exploits (1)

exploitdb WRITEUP VERIFIED
by Anarchy Angel · textwebappsphp
https://www.exploit-db.com/exploits/7540

This writeup describes multiple vulnerabilities in PHPg 1.6, including XSS, path disclosure, and DoS. It provides URLs and methods to exploit these vulnerabilities but does not include executable code.

Classification
Writeup 90%
Attack Type
Xss | Dos | Info Leak
Complexity
Trivial
Reliability
Reliable
Target: PHPg 1.6
No auth needed
Prerequisites: Access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026