{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "Vtiger CRM 8.4.0 Module Manager Import (authenticated admin): index.php?module=ModuleManager&parent=Settings&view=ModuleImport&mode=importUserModuleStep1 -> importUserModuleStep2 -> Basic&mode=importUserModuleStep3",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": ["mariadb", "apache2", "php8.5", "vtiger-crm-8.4.0"],
  "proof_artifacts": [
    "vuln_variant/proof.log",
    "logs/vuln_variant_reproduction_steps.log",
    "vuln_variant/reproduction_steps.sh"
  ],
  "notes": "Confirmed two alternate triggers: (1) language-pack import extracts PHP to languages/<prefix>/, and (2) layout-pack import extracts PHP to layouts/<name>/skins/<name>/ after bypassing a <?php regex filter with the <?= short-echo tag. Both shells execute directly via HTTP."
}