EIP-2026-106060

This exploit leverages a SQL injection vulnerability in Collabtive 1.0 to write a PHP web shell to a writable directory. It requires authentication and constructs a malicious UNION SELECT query to dump shellcode into a file.