EIP-2026-105058

The exploit demonstrates a Remote Command Execution (RCE) vulnerability in AjaxExplorer v1.10.3.2 by leveraging CSRF to create a malicious .htaccess file and a PHP file that executes arbitrary commands. It also includes a Persistent XSS payload.