EIP-2026-105638

This exploit demonstrates an arbitrary file upload vulnerability in Budget and Expense Tracker System 1.0, allowing an attacker to upload a malicious PHP file and execute system commands via a crafted HTTP POST request.