EIP-2026-104424

This exploit demonstrates a Remote Command Execution (RCE) vulnerability in Seacms 11.1 by injecting PHP code into the 'ip' parameter via a POST request to admin_ip.php. The payload bypasses input validation by appending a semicolon and PHP code to execute arbitrary commands.