EIP-2026-107571

This Perl script exploits a Local File Inclusion (LFI) and arbitrary PHP code writing vulnerability in Hedgedog-CMS 1.21. It bypasses admin authentication via a POST parameter and injects malicious PHP code into the configuration file to achieve remote command execution (RCE).