EIP-2026-112921

PRE-CVE

UseBB 1.0.11 - 'admin.php' Local File Inclusion

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112921. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary The exploit demonstrates a local file inclusion vulnerability in UseBB 1.0.11 by manipulating the 'act' parameter in admin.php to traverse directories and access sensitive files like config. This can lead to information disclosure or arbitrary local script execution.

Description

UseBB 1.0.11 - 'admin.php' Local File Inclusion

Exploits (1)

exploitdb WORKING POC VERIFIED
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/35568

The exploit demonstrates a local file inclusion vulnerability in UseBB 1.0.11 by manipulating the 'act' parameter in admin.php to traverse directories and access sensitive files like config. This can lead to information disclosure or arbitrary local script execution.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: UseBB 1.0.11
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026