EIP-2026-110635

This exploit leverages CVE-2024-4577 to achieve unauthenticated remote code execution on vulnerable PHP versions by manipulating the `allow_url_include` and `auto_prepend_file` directives via a crafted POST request. The payload is injected through the `php://input` stream, bypassing typical security restrictions.