EIP-2026-111079

This exploit leverages an authenticated SQL injection vulnerability in phpIPAM 1.4.5 to write a malicious PHP file to a writable web directory, achieving remote code execution. The exploit logs in, injects a PHP shell via SQLi, and executes commands through the shell.