EIP-2026-106025

This exploit leverages an authenticated file upload vulnerability in CmsMadeSimple v2.2.17 to achieve remote code execution by uploading a malicious PHAR file. The script logs in, uploads the file, and triggers execution via a direct request to the uploaded file.