EIP-2026-103345

This exploit demonstrates unauthenticated remote code execution (RCE) in Zeroshell versions 3.6.0 and 3.7.0 via command injection in the 'User', 'x509type', and 'type' parameters of the kerbynet CGI script. The payloads use URL-encoded quotes and ampersands to inject shell commands.