EIP-2026-106592

This Metasploit module exploits a Remote Command Execution vulnerability in the Drupal CODER module by leveraging insufficient input validation in a PHP script. It sends a crafted payload to execute arbitrary commands under the context of the web server user.