EIP-2026-105025

This exploit demonstrates an arbitrary file upload vulnerability in Agora-Project 2.12.11_12-2011. The vulnerability allows an attacker to upload a malicious PHP shell to a predictable directory via the `upload_filemanager.php` script, leading to remote code execution.