EIP-2026-111600

PRE-CVE

PWSPHP 1.2 - Multiple Cross-Site Scripting Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111600. PoCs published by SecuBox fRoGGz.

AI-analyzed exploit summary The provided text describes multiple XSS vulnerabilities in PwsPHP due to insufficient input sanitization. It includes example URLs demonstrating injection points but lacks functional exploit code.

Description

PWSPHP 1.2 - Multiple Cross-Site Scripting Vulnerabilities

Exploits (1)

exploitdb WRITEUP VERIFIED
by SecuBox fRoGGz · textwebappsphp
https://www.exploit-db.com/exploits/25639

The provided text describes multiple XSS vulnerabilities in PwsPHP due to insufficient input sanitization. It includes example URLs demonstrating injection points but lacks functional exploit code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: PwsPHP versions prior to 1.2.3
No auth needed
Prerequisites: Access to vulnerable PwsPHP instance
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026