EIP-2026-106860

The exploit demonstrates a file inclusion vulnerability in Employee Performance Evaluation System v1.0, allowing remote code execution (RCE) via file upload and inclusion. The PoC includes PHP code to rename directories and execute arbitrary code via `phpinfo()`.