EIP-2026-113294

PRE-CVE

WeBid 0.7.3 RC9 - Multiple Remote File Inclusions

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113294. PoCs published by K-159.

AI-analyzed exploit summary This is a vulnerability writeup describing multiple remote file inclusion vulnerabilities in WeBid <= 0.7.3 RC9. The vulnerabilities are due to improper input validation in the '$include_path' parameter in several PHP files, requiring 'register_globals' to be enabled.

Description

WeBid 0.7.3 RC9 - Multiple Remote File Inclusions

Exploits (1)

exploitdb WRITEUP VERIFIED
by K-159 · textwebappsphp
https://www.exploit-db.com/exploits/8195

This is a vulnerability writeup describing multiple remote file inclusion vulnerabilities in WeBid <= 0.7.3 RC9. The vulnerabilities are due to improper input validation in the '$include_path' parameter in several PHP files, requiring 'register_globals' to be enabled.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: WeBid <= 0.7.3 RC9
No auth needed
Prerequisites: register_globals enabled · access to vulnerable PHP files
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026