EIP-2026-111212
PRE-CVEphpStats 0.1.9 - 'PHP-Stats-options.php' Remote Code Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-111212. PoCs published by rgod.
AI-analyzed exploit summary This exploit leverages a PHP code injection vulnerability in PhpStats <= 0.1.9.1b by injecting malicious PHP code into the 'report_w_day' parameter, which is then executed via the admin interface. The exploit sends a crafted POST request to inject the payload and a subsequent GET request to trigger command execution.
Description
phpStats 0.1.9 - 'PHP-Stats-options.php' Remote Code Execution
Exploits (1)
This exploit leverages a PHP code injection vulnerability in PhpStats <= 0.1.9.1b by injecting malicious PHP code into the 'report_w_day' parameter, which is then executed via the admin interface. The exploit sends a crafted POST request to inject the payload and a subsequent GET request to trigger command execution.