EIP-2026-111798

This exploit demonstrates command execution in Roundcube Webmail by manipulating the '_from' parameter to inject sendmail arguments, allowing an attacker to write a malicious PHP file to the webroot. The vulnerability arises from unsanitized input passed to PHP's mail() function.