EIP-2026-112096

PRE-CVE

Simple Forum PHP 2.4 - Cross-Site Request Forgery (Edit Options)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112096. PoCs published by Ehsan Hosseini.

AI-analyzed exploit summary This is a functional CSRF exploit targeting Simple Forum PHP 2.4, which allows an attacker to forge requests to update admin options without user interaction. The PoC submits a crafted form to modify settings like email and captcha configuration.

Description

Simple Forum PHP 2.4 - Cross-Site Request Forgery (Edit Options)

Exploits (1)

exploitdb WORKING POC
by Ehsan Hosseini · htmlwebappsphp
https://www.exploit-db.com/exploits/40532

This is a functional CSRF exploit targeting Simple Forum PHP 2.4, which allows an attacker to forge requests to update admin options without user interaction. The PoC submits a crafted form to modify settings like email and captcha configuration.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Simple Forum PHP 2.4
No auth needed
Prerequisites: Victim must visit a malicious page hosting the exploit · Target admin session must be active
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026