EIP-2026-111761

This exploit leverages an unauthenticated SQL injection vulnerability in Revenue Collection System v1.0 to write a malicious PHP file to disk, enabling remote code execution via a user-defined command.