EIP-2026-112949

This exploit targets a command injection vulnerability in ValidForm Builder's class.phpcaptcha.php. The vulnerability arises from improper sanitization of user input in the shell_exec function, allowing remote command execution via the 'this' parameter.