EIP-2026-109995

This PHP script exploits a remote code execution vulnerability in Nuts-CMS by injecting PHP code via the 'r' parameter in the login.php file. It establishes a connection to the target host and allows the attacker to execute arbitrary commands through a base64-encoded payload.