EIP-2026-113046
PRE-CVEVehicle Service Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113046. PoCs published by Ghuliev.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated RCE vulnerability in Vehicle Service Management System 1.0 by bypassing authentication via SQL injection and uploading a malicious PHP shell. The shell establishes a reverse connection to an attacker-controlled IP and port.
Description
Vehicle Service Management System 1.0 - Remote Code Execution (RCE) (Unauthenticated)
Exploits (1)
This exploit demonstrates an unauthenticated RCE vulnerability in Vehicle Service Management System 1.0 by bypassing authentication via SQL injection and uploading a malicious PHP shell. The shell establishes a reverse connection to an attacker-controlled IP and port.