EIP-2026-113340

The exploit demonstrates a remote code execution vulnerability in WebPortal <= 0.7.4 due to unsafe use of eval() on user-supplied input via the 'code' parameter. The PoC shows how an attacker can execute arbitrary commands by injecting malicious PHP code.