EIP-2026-112834
PRE-CVETypo3 3.5 b5 - 'Translations.php' Remote File Inclusion
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112834. PoCs published by Martin Eiszner.
AI-analyzed exploit summary The exploit demonstrates a file inclusion vulnerability in TYPO3, allowing remote attackers to include and execute arbitrary files from external servers via manipulated URI parameters. The provided URLs show how an attacker can inject malicious PHP code into a log file and then include it, leading to remote command execution.
Description
Typo3 3.5 b5 - 'Translations.php' Remote File Inclusion
Exploits (1)
The exploit demonstrates a file inclusion vulnerability in TYPO3, allowing remote attackers to include and execute arbitrary files from external servers via manipulated URI parameters. The provided URLs show how an attacker can inject malicious PHP code into a log file and then include it, leading to remote command execution.