EIP-2026-109128

This exploit leverages improper input sanitization in LightBlog's registration process to inject arbitrary PHP code into a user account file, enabling remote code execution. It also bypasses authentication via crafted cookies to execute commands on the target system.