EIP-2026-114446

This exploit demonstrates a command injection vulnerability in Xonic.ru News via the 'script.php' file. The 'data' parameter is insufficiently sanitized, allowing arbitrary command execution with the privileges of the web server.