EIP-2026-105174

This exploit demonstrates a remote code execution (RCE) vulnerability in Andy's PHP Knowledgebase by injecting malicious PHP code via unsanitized input in the installation process. The PoC submits a crafted form to 'step5.php' with a payload that executes arbitrary commands (e.g., 'calc').