EIP-2026-105985

This exploit demonstrates an authenticated arbitrary file upload vulnerability in CMS Made Simple 2.2.14, allowing an attacker to upload a malicious PHP reverse shell. The exploit authenticates, uploads the shell, and triggers it to establish a reverse connection.