EIP-2026-112828
PRE-CVEtxtForum 1.0.3/1.0.4 - Remote PHP Script Code Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112828. PoCs published by enji@infosys.tuwien.ac.at.
AI-analyzed exploit summary This exploit demonstrates a remote PHP code-injection vulnerability in txtForum by manipulating the 'skin' parameter in a login form to inject arbitrary code via a malicious URL. The form auto-submits using JavaScript, allowing an attacker to execute arbitrary PHP code on the target system.
Description
txtForum 1.0.3/1.0.4 - Remote PHP Script Code Injection
Exploits (1)
This exploit demonstrates a remote PHP code-injection vulnerability in txtForum by manipulating the 'skin' parameter in a login form to inject arbitrary code via a malicious URL. The form auto-submits using JavaScript, allowing an attacker to execute arbitrary PHP code on the target system.