Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111643. PoCs published by You_You.
AI-analyzed exploit summary The code describes a remote file inclusion vulnerability in Quickblogger 1.4 due to improper input sanitization in the 'page' parameter of acc.php. An attacker can exploit this to execute arbitrary server-side script code with webserver privileges.
Description
Quickblogger 1.4 - Remote File Inclusion
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by You_You · textwebappsphp
https://www.exploit-db.com/exploits/28691
The code describes a remote file inclusion vulnerability in Quickblogger 1.4 due to improper input sanitization in the 'page' parameter of acc.php. An attacker can exploit this to execute arbitrary server-side script code with webserver privileges.
Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
Quickblogger version 1.4
No auth needed
Prerequisites:
Access to the target web application · Ability to host a malicious file on an external server
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026