EIP-2026-111609

PRE-CVE

Qcodo Development Framework 0.3.3 - Full Information Disclosure

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111609. PoCs published by Daniel Godoy.

AI-analyzed exploit summary This exploit targets the Qcodo Development Framework by extracting database credentials from the codegen.php file. It parses the source code to retrieve server, database, username, and password information.

Description

Qcodo Development Framework 0.3.3 - Full Information Disclosure

Exploits (1)

exploitdb WORKING POC VERIFIED
by Daniel Godoy · textwebappsphp
https://www.exploit-db.com/exploits/16116

This exploit targets the Qcodo Development Framework by extracting database credentials from the codegen.php file. It parses the source code to retrieve server, database, username, and password information.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Qcodo Development Framework 0.3.3
No auth needed
Prerequisites: Access to the target's /qcodo/_devtools/codegen.php file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026