EIP-2026-104744

This exploit targets Omeka 2.2.1, leveraging an authenticated file upload vulnerability to achieve remote code execution by bypassing file validation and uploading a malicious PHP script with a '.php5' extension.