EIP-2026-113306

PRE-CVE

Webify eDownloads Cart - Arbitrary File Deletion

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113306. PoCs published by JIKO.

AI-analyzed exploit summary This is a technical writeup describing an arbitrary file deletion vulnerability in Webify edownloads cart. The vulnerability allows an attacker to delete files uploaded in posts by manipulating the URL path.

Description

Webify eDownloads Cart - Arbitrary File Deletion

Exploits (1)

exploitdb WRITEUP
by JIKO · textwebappsphp
https://www.exploit-db.com/exploits/21269

This is a technical writeup describing an arbitrary file deletion vulnerability in Webify edownloads cart. The vulnerability allows an attacker to delete files uploaded in posts by manipulating the URL path.

Classification
Writeup 80%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Webify edownloads cart
No auth needed
Prerequisites: Access to the target server's uploads directory
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026