EIP-2026-101902

This exploit demonstrates a command injection vulnerability in OpenDreamBox 2.0.0's WebAdmin plugin, allowing remote command execution via the 'command' parameter in the '/webadmin/script' endpoint. The PoC includes examples of commands to execute and a Shodan dork for target discovery.