EIP-2026-112479

PRE-CVE

Sulata iSoft - 'stream.php' Local File Disclosure

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112479. PoCs published by Sudden_death.

AI-analyzed exploit summary This exploit targets a local file disclosure vulnerability in Sulata iSoft's stream.php by manipulating the 'path' parameter to access sensitive files like connection.php. The PoC demonstrates directory traversal to leak configuration files.

Description

Sulata iSoft - 'stream.php' Local File Disclosure

Exploits (1)

exploitdb WORKING POC VERIFIED

by Sudden_death · textwebappsphp

https://www.exploit-db.com/exploits/15720

View Code ZIP pw:eip

This exploit targets a local file disclosure vulnerability in Sulata iSoft's stream.php by manipulating the 'path' parameter to access sensitive files like connection.php. The PoC demonstrates directory traversal to leak configuration files.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Sulata iSoft (stream.php)

No auth needed

Prerequisites: Access to the vulnerable stream.php endpoint

MITRE ATT&CK

T1005 - Data from Local System T1083 - File and Directory Discovery

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026