EIP-2026-110516

This PHP script exploits a remote code execution vulnerability in PBLang 4.65 by injecting malicious input into the 'loc' parameter during user registration, then triggering the payload via a crafted request to 'setcookie.php'.