EIP-2026-106040

This exploit demonstrates an arbitrary file upload vulnerability in CNDSOFT 2.3 via a CSRF attack. The PoC uploads a PHP shell (shell.php) by manipulating the 'kullanici_resmi' parameter in a multipart/form-data request.