EIP-2026-106817

This exploit targets a PHP code injection vulnerability in Elastix <= 2.4. It leverages a file upload mechanism to inject malicious PHP code, achieving remote command execution (RCE) via a crafted payload.