EIP-2026-109633

This exploit targets a file write vulnerability in Multi-Vendor Online Groceries Management System 1.0, allowing arbitrary PHP code injection via the `SystemSettings.php` endpoint. The injected code is then executed via inclusion in `home.php`, enabling remote command execution.