EIP-2026-105135

This is a technical writeup describing an arbitrary file upload vulnerability in Alstrasoft ProTaxi Enterprise v3.5. The exploit involves registering as a passenger, uploading a malicious file via the profile photo upload feature, and executing it via the uploads directory.