Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114605. PoCs published by Abysssec.
AI-analyzed exploit summary This PHP script exploits a vulnerability in Zenphoto <= 1.3 by sending a crafted POST request to 'zp-core/setup.php' to update MySQL configuration settings, potentially allowing an attacker to take control of the database and upload malicious files. The exploit leverages improper input validation in the setup process.
Description
ZenPhoto - Config Update / Command Execution
Exploits (1)
This PHP script exploits a vulnerability in Zenphoto <= 1.3 by sending a crafted POST request to 'zp-core/setup.php' to update MySQL configuration settings, potentially allowing an attacker to take control of the database and upload malicious files. The exploit leverages improper input validation in the setup process.