EIP-2026-107127

This exploit targets Flatnuke <=2.5.8, leveraging a directory traversal vulnerability in the 'myforum' cookie to escalate privileges and upload a malicious .gif file containing PHP code. The exploit then renames the file to .php and executes arbitrary commands via HTTP headers.