EIP-2026-118635

This PHP script exploits a remote heap overflow in HLDS WebMod 0.48 by sending a maliciously crafted POST request with an oversized 'rconpass' parameter. The exploit includes shellcode for a bind shell and leverages a JMP ESP instruction in 'mp.dll' to redirect execution.