EIP-2026-106265

This exploit targets CSZ CMS Version 1.3.0, leveraging an authenticated file upload vulnerability in the admin upgrade functionality to achieve remote command execution. It automates the login process, uploads a malicious PHP file via a ZIP archive, and executes arbitrary commands.