EIP-2026-105828

This document describes two vulnerabilities in chillyCMS 1.3.0: a failure to restrict URL access via 302 redirects and an arbitrary file upload vulnerability in the admin design page. It provides step-by-step exploitation instructions but does not include functional exploit code.