EIP-2026-111215

PRE-CVE

PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111215. PoCs published by anonymous.

AI-analyzed exploit summary This exploit demonstrates multiple input validation vulnerabilities in phpSysInfo, including XSS, HTTP response splitting, and arbitrary local file inclusion. The PoC provides URLs to trigger these vulnerabilities.

Description

PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by anonymous · textwebappsphp

https://www.exploit-db.com/exploits/26499

View Code ZIP pw:eip

This exploit demonstrates multiple input validation vulnerabilities in phpSysInfo, including XSS, HTTP response splitting, and arbitrary local file inclusion. The PoC provides URLs to trigger these vulnerabilities.

Classification

Working Poc 90%

Attack Type

Xss | Info Leak | Other

Complexity

Trivial

Reliability

Reliable

Target: phpSysInfo (version not specified)

No auth needed

Prerequisites: Access to the target application

MITRE ATT&CK

T1059.007 - JavaScript T1190 - Exploit Public-Facing Application

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026