EIP-2026-105846

This exploit demonstrates an authentication bypass via SQL injection, followed by arbitrary file upload leading to remote code execution (RCE) in Church Management System 1.0. It leverages a hardcoded SQLi payload to bypass login and uploads a malicious PHP shell.