EIP-2026-111340
PRE-CVEPligg CMS 2.0.2 - Cross-Site Request Forgery / Code Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-111340. PoCs published by Curesec Research Team.
AI-analyzed exploit summary The advisory describes a directory traversal and code execution vulnerability in Pligg CMS 2.0.2, where an admin can be tricked via CSRF into saving malicious PHP code to arbitrary files. The PoC demonstrates a traversal attack to overwrite a 404.php file with a PHP payload.
Description
Pligg CMS 2.0.2 - Cross-Site Request Forgery / Code Execution
Exploits (1)
The advisory describes a directory traversal and code execution vulnerability in Pligg CMS 2.0.2, where an admin can be tricked via CSRF into saving malicious PHP code to arbitrary files. The PoC demonstrates a traversal attack to overwrite a 404.php file with a PHP payload.