EIP-2026-104876

This exploit chains an unauthenticated backup dump vulnerability with an SQL injection to achieve remote code execution (RCE) in A2billing 2.x. The attacker injects malicious PHP code into the database via SQLi, then triggers a backup to a .php file, allowing arbitrary command execution.