EIP-2026-107523

This exploit targets a command injection vulnerability in GUESTEX guestbook software via the 'email' parameter, which is passed unsanitized to a sendmail pipe. It allows remote code execution by injecting commands into the HTTP POST request.