EIP-2026-111854

PRE-CVE

S-CMS 2.0b3 - Multiple Local File Inclusions

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111854. PoCs published by YEnH4ckEr.

AI-analyzed exploit summary This is a writeup detailing multiple local file inclusion (LFI) vulnerabilities in S-CMS <= v2.0 Beta3. It describes three distinct LFI vectors, including conditions such as requiring register globals to be enabled or admin privileges.

Description

S-CMS 2.0b3 - Multiple Local File Inclusions

Exploits (1)

exploitdb WRITEUP VERIFIED
by YEnH4ckEr · textwebappsphp
https://www.exploit-db.com/exploits/8913

This is a writeup detailing multiple local file inclusion (LFI) vulnerabilities in S-CMS <= v2.0 Beta3. It describes three distinct LFI vectors, including conditions such as requiring register globals to be enabled or admin privileges.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: S-CMS <= v2.0 Beta3
Auth required
Prerequisites: register globals enabled for one vector · admin privileges for another vector
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026