EIP-2026-105462

The exploit demonstrates two vulnerabilities in Big Forum 5.2v: an arbitrary file upload via avatar upload functionality and a local file inclusion via plugin installation. Both vulnerabilities allow remote code execution (RCE) under specific conditions.