EIP-2026-107547

This Perl script exploits a PHP code injection vulnerability in H2O-CMS <= 3.4 by injecting malicious PHP code into configuration parameters, leading to remote command execution. It also bypasses authentication via cookie manipulation.