EIP-2026-105990

This exploit demonstrates an arbitrary file upload vulnerability in the Antz toolkit for CMS Made Simple. It sends a crafted multipart/form-data POST request to upload a PHP shell, then brute-forces the shell's location in the /modules/antz/tmp/ directory.