EIP-2026-104421

This exploit demonstrates an authenticated remote code execution (RCE) vulnerability in Schlix CMS 2.2.6-6. The attack involves uploading a malicious ZIP file containing a modified 'packageinfo.inc' file with embedded PHP code, which is then executed when accessing the 'About' tab of the installed extension.