EIP-2026-105017

The exploit demonstrates multiple vulnerabilities in FileRun 2017.03.18, including path manipulation for arbitrary file read/write, stored XSS via file upload, CSRF for unauthorized actions, and open redirect vulnerabilities. It includes a detailed PoC for uploading a PHP shell to achieve remote code execution.