EIP-2026-111150

This exploit targets PHPMyChat 0.15.0dev by leveraging SQL injection in the PWD_Hash parameter to inject a malicious payload into the c_messages table, which is then executed via an eval() call to achieve remote command execution.