EIP-2026-109676

This exploit leverages Apache log poisoning via LFI in My Simple Forum v7.1 to achieve remote command execution. It injects PHP code into the server's access logs and then includes the log file to execute arbitrary commands.