EIP-2026-106951

This exploit demonstrates an unauthenticated file upload vulnerability in Exam Hall Management System 1.0, allowing arbitrary PHP file upload via the `/pages/save_user.php` endpoint. The PoC includes a PHP script to automate the upload and verify shell placement.