EIP-2026-109433

This exploit targets a PHP code injection vulnerability in MetInfo 2.0 by leveraging an undefined variable in `common.inc.php` to execute arbitrary PHP code via base64-encoded payloads. The PoC writes a malicious PHP file to the target server and verifies its execution.