EIP-2026-106585

This exploit targets a remote command execution vulnerability in Drupal versions before 4.7.6 by injecting PHP code via the comment preview functionality. It leverages the 'post comments' permission and access to multiple input filters to execute arbitrary commands.