EIP-2026-103230

This exploit leverages a code injection vulnerability in TCPDF by injecting arbitrary PHP code via the 'params' attribute of the 'Rect' method. The payload executes the 'id' command, demonstrating remote code execution (RCE) capabilities.