EIP-2026-105922

This exploit demonstrates an unauthenticated file upload vulnerability in Clinic Management System 1.0, allowing remote code execution by uploading a malicious PHP file via the 'manage_website.php' endpoint. The PoC includes a crafted HTTP POST request with a PHP shell payload.