EIP-2026-104815

This exploit targets a file write vulnerability in 2532|Gigs 1.2.2 via the 'calcss_edit.php' script, allowing arbitrary PHP code injection into 'calendar.css' and subsequent remote command execution. The PoC sends a crafted POST request to overwrite the CSS file with malicious PHP code.