EIP-2026-105352

This exploit demonstrates a remote file upload vulnerability in B-Hind CMS via the TinyMCE plugin's upload.php endpoint. The PoC provides a direct URL path to exploit the vulnerability, allowing arbitrary file uploads.