EIP-2026-109669

This exploit demonstrates a PHP command execution vulnerability in MyLittleForum 2.3.5 by injecting arbitrary PHP code into the 'database' field during installation, which is then written to and executed from the config/db_settings.php file.