EIP-2026-109805

This exploit targets a file inclusion vulnerability in MySQLDumper 1.24.4, allowing remote attackers to execute arbitrary PHP code via crafted input to the 'config' parameter. The vulnerability arises from insufficient sanitization in the read_config() function, which uses eval() on user-controlled input.