EIP-2026-105481

This exploit demonstrates an unauthenticated RCE vulnerability in Billing System Project 1.0 by bypassing authentication via SQL injection and uploading a malicious PHP shell disguised as a product image. The shell allows arbitrary command execution via a GET parameter.