EIP-2026-110295

This Ruby script exploits an authenticated remote code execution vulnerability in OpenEMR versions prior to 5.0.1 (Patch 4) by uploading a malicious PHP file via the import_template.php endpoint and then executing it to achieve a reverse shell.