EIP-2026-116061

PRE-CVE

phpDEV5 - System-Call Local Denial of Service

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-116061. PoCs published by Ali7.

AI-analyzed exploit summary This exploit is a simple PHP script that executes arbitrary commands via the `system()` function, leading to a Denial-of-Service (DoS) condition on PHPDev5 Apache Server. The PoC demonstrates command injection by passing an undefined variable `$Ali7` to the system call, which could crash the server or execute unintended commands.

Description

phpDEV5 - System-Call Local Denial of Service

Exploits (1)

exploitdb WORKING POC VERIFIED
by Ali7 · textdoswindows
https://www.exploit-db.com/exploits/888

This exploit is a simple PHP script that executes arbitrary commands via the `system()` function, leading to a Denial-of-Service (DoS) condition on PHPDev5 Apache Server. The PoC demonstrates command injection by passing an undefined variable `$Ali7` to the system call, which could crash the server or execute unintended commands.

Classification
Working Poc 80%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: PHPDev 5
No auth needed
Prerequisites: Access to upload or place a PHP file on the target server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026