EIP-2026-107042

This exploit leverages a blind SQL injection vulnerability in Family Connections CMS <= 1.8.2 to write a malicious PHP file (rce.php) to the target server, enabling remote command execution via a crafted HTTP request with manipulated cookies.