EIP-2026-110590

This PHP script exploits a remote code execution vulnerability in pHNews alpha 1 by manipulating the 'templates_dir' parameter to inject arbitrary commands via log file poisoning. It requires register_globals=On and magic_quotes=Off.