Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-113266. PoCs published by Mirabbas Ağalarov.
AI-analyzed exploit summary The exploit demonstrates a Blind SSRF vulnerability in Webedition CMS v2.9.8.8 by sending a crafted POST request to the `rpc.php` endpoint with a malicious URL in the `we_cmd[0]` parameter. The vulnerability allows an attacker to force the server to make arbitrary HTTP requests to internal or external resources.
Description
Webedition CMS v2.9.8.8 - Blind SSRF
Exploits (1)
The exploit demonstrates a Blind SSRF vulnerability in Webedition CMS v2.9.8.8 by sending a crafted POST request to the `rpc.php` endpoint with a malicious URL in the `we_cmd[0]` parameter. The vulnerability allows an attacker to force the server to make arbitrary HTTP requests to internal or external resources.