Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111568. PoCs published by cr4wl3r.
AI-analyzed exploit summary The exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Ptag <= 4.0.0 by manipulating the 'ptag_dir' parameter in session.php and sql.php to include arbitrary remote files. The PoC shows how an attacker can inject a shell by appending the malicious URL to the vulnerable parameter.
Description
Ptag 4.0.0 - Multiple Remote File Inclusions
Exploits (1)
The exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Ptag <= 4.0.0 by manipulating the 'ptag_dir' parameter in session.php and sql.php to include arbitrary remote files. The PoC shows how an attacker can inject a shell by appending the malicious URL to the vulnerable parameter.