EIP-2026-109764

This exploit leverages a file inclusion vulnerability in MyEvent 1.2 by manipulating the 'myevent_path' parameter to include a remote file containing arbitrary commands. The 'cmd' parameter is used to execute system commands, demonstrating remote code execution (RCE).