EIP-2026-113153

The exploit demonstrates a command injection vulnerability in VPOPMail's vpopmail.php script due to insufficient input sanitization. Attackers can manipulate URI parameters to execute arbitrary system commands with web server privileges.