EIP-2026-117086

PRE-CVE

DWebPro 3.4.1 - Http.ini Plaintext Password Storage

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-117086. PoCs published by rUgg1n3.

AI-analyzed exploit summary This is a writeup describing an information disclosure vulnerability in DWebPro web server where database credentials are stored in plain text in 'http.ini'. No exploit code is provided, only configuration details.

Description

DWebPro 3.4.1 - Http.ini Plaintext Password Storage

Exploits (1)

exploitdb WRITEUP VERIFIED
by rUgg1n3 · textlocalwindows
https://www.exploit-db.com/exploits/23037

This is a writeup describing an information disclosure vulnerability in DWebPro web server where database credentials are stored in plain text in 'http.ini'. No exploit code is provided, only configuration details.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: DWebPro web server
No auth needed
Prerequisites: read access to 'http.ini' file
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026