EIP-2026-106944

This exploit targets eVision CMS 2.0 by leveraging an arbitrary file upload vulnerability combined with a Local File Inclusion (LFI) flaw to achieve remote command execution. It uploads a malicious PHP file disguised as a .gif, then includes it via LFI to execute system commands.