EIP-2026-111182

The provided text describes a command injection vulnerability in PHPPing's index.php script, where unsanitized input allows remote command execution via shell metacharacters. The example demonstrates appending a command (dir) to a ping request.