EIP-2026-112684

This Perl script exploits a command injection vulnerability in TikiWiki <= 1.9.8 via the 'tiki-graph_formula.php' script, which fails to sanitize the 'f' parameter. It allows remote command execution by injecting arbitrary PHP commands through a crafted HTTP request.