EIP-2026-104693

This exploit demonstrates an unauthenticated blind command injection vulnerability in ABB Cylon Aspect's factorySetSerialNum.php. The vulnerability allows arbitrary command execution via the 'serial' and 'ManufactureDate' POST parameters, which are not properly sanitized.