EIP-2026-105048

This exploit leverages a file upload vulnerability in AJClassifieds Realestate to achieve remote code execution by disguising a PHP shell as a GIF image. The attacker uploads a malicious file with a GIF header followed by PHP code, bypassing file type restrictions.