EIP-2026-110309

This Metasploit module exploits a PHP code execution vulnerability in OpenHelpDesk 1.0.100 by injecting arbitrary PHP code via the 'function' parameter in ajax.php. The exploit leverages improper use of eval() without requiring register_globals to be enabled.