EIP-2026-104769

This exploit demonstrates a file upload vulnerability in Real Estate Management System v1.0, allowing remote code execution by bypassing file extension checks via Burp Suite interception. The attacker uploads a malicious PHP file disguised as an image, then executes arbitrary commands through the uploaded script.