Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114509. PoCs published by Dj7xpl.
AI-analyzed exploit summary This PHP script exploits a file upload vulnerability in YaPIG 0.95b by crafting a malicious multipart/form-data POST request to 'add_comment.php', allowing arbitrary file upload and remote code execution via a PHP shell.
Description
YaPiG 0.95b - Remote Code Execution
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Dj7xpl · phpwebappsphp
https://www.exploit-db.com/exploits/3834
This PHP script exploits a file upload vulnerability in YaPIG 0.95b by crafting a malicious multipart/form-data POST request to 'add_comment.php', allowing arbitrary file upload and remote code execution via a PHP shell.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
YaPIG 0.95b
No auth needed
Prerequisites:
Network access to the target server · YaPIG 0.95b installed and accessible
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026