EIP-2026-110794

This exploit demonstrates a remote file overwriting vulnerability in PHP-agenda <= 2.2.5 via the install.php script. It allows an attacker to inject arbitrary PHP code into config.inc.php, leading to remote command execution.