EIP-2026-105844

This exploit demonstrates an unrestricted file upload vulnerability in Church Management System 1.0, allowing authenticated users to bypass file extension checks via proxy interception and achieve remote code execution by uploading a malicious PHP file.