EIP-2026-105799

This PHP script exploits an arbitrary file upload vulnerability in cFTP <= 0.1 (r80) by manipulating allowed file extensions via cookie injection and uploading a malicious file. It demonstrates the full exploit chain, including authentication bypass and file upload.