EIP-2026-104293

This exploit targets a file upload vulnerability in JMX2 Email Tester, allowing arbitrary PHP code execution via the `save_email.php` endpoint. The PoC crafts a malicious HTML file with embedded PHP code and uploads it to the server, resulting in remote code execution.