EIP-2026-106530

This PHP exploit demonstrates a remote PHP code injection vulnerability in Dolphin <= 7.0.7 by leveraging unsanitized input passed to eval() via the 'bubbles' parameter in member_menu_queries.php. It authenticates, injects malicious PHP code, and provides a shell for command execution.