EIP-2026-113286
PRE-CVEWebfroot Shoutbox 2.32 - Remote Command Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113286. PoCs published by pokleyzz.
AI-analyzed exploit summary This Perl script exploits a command injection vulnerability in Webfroot Shoutbox < 2.32 by injecting PHP code into Apache access logs via the 'conf' URI parameter, then executing arbitrary commands. The exploit leverages insufficient input sanitization to achieve remote code execution.
Description
Webfroot Shoutbox 2.32 - Remote Command Execution
Exploits (1)
This Perl script exploits a command injection vulnerability in Webfroot Shoutbox < 2.32 by injecting PHP code into Apache access logs via the 'conf' URI parameter, then executing arbitrary commands. The exploit leverages insufficient input sanitization to achieve remote code execution.