EIP-2026-107314

This exploit targets a vulnerability in Fusion SBX <= 1.2 by injecting arbitrary code via HTTP POST requests to the admin settings page. It leverages PHP functions (system, exec, or passthru) to achieve remote command execution with HTTPD privileges.