Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-111684. PoCs published by i2sec_Hyo jun Oh.
AI-analyzed exploit summary This exploit describes an unauthenticated file upload vulnerability in RazorCMS <= 1.2.1, allowing attackers to upload malicious PHP files (webshells) to the server. The vulnerability stems from insufficient file extension validation, enabling remote code execution (RCE) via the uploaded file.
Description
RazorCMS 1.2.1 STABLE - Arbitrary File Upload
Exploits (1)
This exploit describes an unauthenticated file upload vulnerability in RazorCMS <= 1.2.1, allowing attackers to upload malicious PHP files (webshells) to the server. The vulnerability stems from insufficient file extension validation, enabling remote code execution (RCE) via the uploaded file.