EIP-2026-110705

The exploit demonstrates a remote command execution vulnerability in PHP Graphy 0.9.7 via the 'root_dir' parameter in index.php. The vulnerability arises from improper input sanitization, allowing arbitrary command injection through the system() call on line 791.