EIP-2026-105634

The exploit demonstrates an arbitrary file upload vulnerability in BSW Gallery due to insufficient input sanitization. Attackers can upload malicious files (e.g., shell.php) to achieve remote code execution (RCE) on the server.