EIP-2026-104721

This Metasploit module exploits a vulnerability in the Drupal RESTWS module (7.x) by sending a crafted GET request to execute arbitrary PHP code via the 'passthru' function. The exploit leverages improper input validation in the module's page callbacks to achieve remote code execution.