EIP-2026-112708
PRE-CVETinyCMS 1.3 - Arbitrary File Upload / Cross-Site Request Forgery
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112708. PoCs published by KedAns-Dz.
AI-analyzed exploit summary This HTML form demonstrates an arbitrary file upload vulnerability in TinyCMS 1.3, allowing an attacker to upload malicious content to the server via a crafted POST request to 'functions.php'. The exploit leverages improper input validation to achieve remote code execution (RCE) by uploading a malicious page.
Description
TinyCMS 1.3 - Arbitrary File Upload / Cross-Site Request Forgery
Exploits (1)
This HTML form demonstrates an arbitrary file upload vulnerability in TinyCMS 1.3, allowing an attacker to upload malicious content to the server via a crafted POST request to 'functions.php'. The exploit leverages improper input validation to achieve remote code execution (RCE) by uploading a malicious page.