EIP-2026-111892

PRE-CVE

SaphpLesson 4.0 food - Remote File Inclusion

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111892. PoCs published by indoushka.

AI-analyzed exploit summary This is a writeup describing an RFI (Remote File Inclusion) vulnerability in the 'food' script powered by SaphpLesson 4.0. The exploit details two URLs where the 'cache' and 'fn' parameters are vulnerable to RFI attacks.

Description

SaphpLesson 4.0 food - Remote File Inclusion

Exploits (1)

exploitdb WRITEUP VERIFIED
by indoushka · textwebappsphp
https://www.exploit-db.com/exploits/10687

This is a writeup describing an RFI (Remote File Inclusion) vulnerability in the 'food' script powered by SaphpLesson 4.0. The exploit details two URLs where the 'cache' and 'fn' parameters are vulnerable to RFI attacks.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: Food script powered by SaphpLesson 4.0
No auth needed
Prerequisites: Access to the vulnerable URL parameters
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026