EIP-2026-107555

This PHP exploit targets multiple Harland Scripts products by injecting malicious PHP code into template files via an unauthenticated template save vulnerability, enabling remote command execution. It leverages a POST request to inject a payload that includes a passthru function for command execution.