EIP-2026-112732
PRE-CVEToendaCMS 1.0.4 - 'Media.php' Directory Traversal
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112732. PoCs published by MoHaJaLi.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in toendaCMS by manipulating the 'album' and 'key' parameters in the media.php file to access sensitive files like /etc/passwd. The vulnerability arises from insufficient input sanitization, allowing attackers to traverse directories and read arbitrary files.
Description
ToendaCMS 1.0.4 - 'Media.php' Directory Traversal
Exploits (1)
The exploit demonstrates a directory traversal vulnerability in toendaCMS by manipulating the 'album' and 'key' parameters in the media.php file to access sensitive files like /etc/passwd. The vulnerability arises from insufficient input sanitization, allowing attackers to traverse directories and read arbitrary files.