EIP-2026-114605

This PHP script exploits a vulnerability in Zenphoto <= 1.3 by sending a crafted POST request to 'zp-core/setup.php' to update MySQL configuration settings, potentially allowing an attacker to take control of the database and upload malicious files. The exploit leverages improper input validation in the setup process.