EIP-2026-106398

This exploit leverages an authentication bypass vulnerability in DeDeCMS by manipulating session variables and file upload functionality to achieve unauthorized access. The PoC demonstrates how an attacker can upload a malicious file (e.g., shell.asp) by bypassing authentication checks via the '_SESSION[dede_admin_id]' parameter.