EIP-2026-104755

This exploit demonstrates a code injection vulnerability in PHP's `create_function()` due to insufficient input sanitization. The PoC injects arbitrary code (e.g., `phpinfo()`) by manipulating the function string, exploiting the lack of validation in PHP 5.2.6.