EIP-2026-109698

This exploit demonstrates a bypass of MyBB's unset_globals() function, leading to remote code execution (RCE) via manipulation of the $shutdown_functions array. The vulnerability arises from improper handling of global variables when register_globals is enabled and specific conditions are met.