EIP-2026-112850

This exploit targets a backdoor in Ucms versions 1.4, 1.7, and 1.8, allowing remote code execution via a hidden password check in the search.cache.inc.php file. The PoC sends a POST request with a specific password and arbitrary PHP code to execute.