EIP-2026-111046

The exploit demonstrates a remote command execution vulnerability in phpFileManager 0.9.8 by injecting OS commands via the 'cmd' parameter in a GET request. The PoC includes URLs that execute 'cmd.exe' and 'calc.exe' on a Windows system.