EIP-2026-105436

This exploit demonstrates a file upload vulnerability in Beauty-salon v1.0, allowing an attacker to upload a malicious PHP web shell. The vulnerability stems from improper sanitization of the `userimage` parameter, enabling remote code execution (RCE).