EIP-2026-105645

This exploit leverages a file upload vulnerability in Built2Go PHP Rate My Photo v1.46.4 by disguising a PHP shell as a GIF file (GIF89a header) to achieve remote code execution (RCE). The attacker uploads the malicious file via the member.php interface, bypassing file type restrictions.