EIP-2026-106657

This exploit leverages a command injection vulnerability in E107 v0.7.8's mailout.php by manipulating the $mailer parameter passed to a popen() call. It requires admin credentials to overwrite filetypes.php, enabling the upload of dangerous file types.