EIP-2026-105329

This is a writeup describing a remote file upload vulnerability in Availscript Classmate Script, allowing an attacker to upload a malicious PHP shell during registration. The exploit involves registering with a shell filename and accessing it via a predictable URL pattern.