EIP-2026-106624

This exploit demonstrates an unauthenticated remote code execution via unrestricted file upload and an unauthenticated SQL injection in E-Commerce System 1.0. The PoC includes detailed HTTP requests for both vulnerabilities.