EIP-2026-105143

This exploit demonstrates an unrestricted file upload vulnerability in Alumni Management System 1.0, allowing an authenticated attacker to upload a PHP webshell and achieve remote code execution (RCE). The steps outline the process of uploading a malicious file via the 'System Settings' page and accessing it to execute arbitrary commands.