EIP-2026-108795

This is a technical writeup detailing a remote code execution vulnerability in the Joomla Module Camp26 Visitor Data 1.1. The vulnerability arises from improper handling of the HTTP_X_FORWARDED_FOR header, allowing command injection via the exec() function.