EIP-2026-105168

This exploit demonstrates a pre-authentication Local File Inclusion (LFI) and SQL Injection (SQLi) vulnerability in the aMSN web application (version 0.98.9). The SQLi can be leveraged to write a PHP shell to a specified path, enabling remote command execution.