EIP-2026-100078

This exploit demonstrates an arbitrary file upload vulnerability in Roxy Fileman 1.4.5, allowing an attacker to upload a malicious JSP file disguised as a JPG and then rename/move it to achieve remote code execution.