Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112678. PoCs published by Kacper Szurek.
AI-analyzed exploit summary The exploit demonstrates an arbitrary file download vulnerability in Tiki Wiki CMS 15.0 via the `flv_stream.php` file, which fails to properly sanitize user input in the `file` parameter, allowing directory traversal attacks. The PoC includes a functional example to download the database configuration file.
Description
Tiki Wiki CMS 15.0 - Arbitrary File Download
Exploits (1)
The exploit demonstrates an arbitrary file download vulnerability in Tiki Wiki CMS 15.0 via the `flv_stream.php` file, which fails to properly sanitize user input in the `file` parameter, allowing directory traversal attacks. The PoC includes a functional example to download the database configuration file.