EIP-2026-103166

This exploit demonstrates a command injection vulnerability in Mitel Audio and Web Conferencing (AWC) by injecting shell commands via the 'xsl' parameter in a URL. The vulnerability allows remote attackers to execute arbitrary commands with the privileges of the application user.