EIP-2026-104782

This Metasploit module exploits an arbitrary file upload vulnerability in the Th3 MMA mma.php backdoor, allowing remote code execution by uploading a malicious PHP payload. The exploit checks for the presence of the vulnerable form and uploads a payload, then triggers it via a GET request.