EIP-2026-104341

The document describes a persistent command injection vulnerability in Mobile Atlas Creator 1.9.12, where improper input sanitization in the 'Name' field allows HTML and local command path injection. The vulnerability can be exploited by saving malicious script code as an Atlas Map file and sending it to victims.