EIP-2026-100539

This exploit demonstrates a file upload vulnerability in SAS Hotel Management System, allowing an attacker to upload a malicious ASP file disguised as a GIF image. The exploit leverages improper file type validation to achieve remote code execution.