EIP-2026-105003

This exploit demonstrates a PHP code injection vulnerability in Aero CMS v0.0.1 by uploading a malicious PHP file disguised as an image. The payload triggers a DNS lookup to a Collaborator server, confirming the vulnerability.