Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111618. PoCs published by LiquidWorm.
AI-analyzed exploit summary The exploit demonstrates a database backup disclosure vulnerability in qEngine CMS 6.0.0 by brute-forcing predictable backup filenames in the '/admin/backup' directory. It also includes details for a Local File Inclusion (LFI) vulnerability and a Remote Code Execution (RCE) vulnerability via file upload.
Description
qEngine CMS 6.0.0 - Multiple Vulnerabilities
Exploits (1)
The exploit demonstrates a database backup disclosure vulnerability in qEngine CMS 6.0.0 by brute-forcing predictable backup filenames in the '/admin/backup' directory. It also includes details for a Local File Inclusion (LFI) vulnerability and a Remote Code Execution (RCE) vulnerability via file upload.