EIP-2026-112176

PRE-CVE

Sisfokol 4.0 - Arbitrary File Upload

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112176. PoCs published by cr4wl3r.

AI-analyzed exploit summary This is a security advisory detailing an unauthenticated file upload vulnerability in Sisfokol 4.0, allowing remote attackers to upload malicious files (e.g., webshells) without authentication. The advisory lists affected directories and describes the impact as high, including potential system access.

Description

Sisfokol 4.0 - Arbitrary File Upload

Exploits (1)

exploitdb WRITEUP
by cr4wl3r · textwebappsphp
https://www.exploit-db.com/exploits/22038

This is a security advisory detailing an unauthenticated file upload vulnerability in Sisfokol 4.0, allowing remote attackers to upload malicious files (e.g., webshells) without authentication. The advisory lists affected directories and describes the impact as high, including potential system access.

Classification
Writeup 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Theoretical
Target: Sisfokol 4.0
No auth needed
Prerequisites: Access to the target web application · Ability to send HTTP POST requests
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026