EIP-2026-110592

This exploit demonstrates a remote code execution vulnerability in Phoenix Exploit Kit's geoip.php file, where the 'bdr' GET parameter is passed directly to eval(). The PoC shows arbitrary PHP code execution via a simple HTTP request.