EIP-2026-109950

This exploit demonstrates a PHP code execution vulnerability in NodCMS by injecting malicious code into language files via the 'Edit Language' feature. The payload is submitted through a crafted POST request, leading to arbitrary code execution.