Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112739. PoCs published by Aung Khant.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file write vulnerability in TomatoCart via the `file_manager` module, allowing an attacker to create a malicious PHP file with shell command execution. The vulnerability is exploited through a crafted POST request to `/admin/json.php` with a malicious payload in the `content` parameter.
Description
TomatoCart - 'json.php' Security Bypass
Exploits (1)
This exploit demonstrates an arbitrary file write vulnerability in TomatoCart via the `file_manager` module, allowing an attacker to create a malicious PHP file with shell command execution. The vulnerability is exploited through a crafted POST request to `/admin/json.php` with a malicious payload in the `content` parameter.