EIP-2026-112597

This exploit demonstrates a Remote Command Execution (RCE) vulnerability in Tenrok 1.1.0 by injecting PHP code into the 'Title' field of post.php, which is then executed via the 'cmd' parameter in display.php. It also includes a Users Data Disclosure vulnerability via direct access to userpwd.txt.