EIP-2026-110686

This exploit targets a SQL injection vulnerability in PHP Director 0.2.1, leveraging a UNION-based attack to write a malicious PHP file to the server via INTO OUTFILE. The exploit sends a crafted HTTP request to inject PHP code that enables remote command execution.