EIP-2026-107004

This exploit demonstrates a remote file upload vulnerability in EZ-Oscommerce 3.1, allowing an attacker to upload arbitrary files via the file manager. It includes forms for both file upload and file creation, enabling remote code execution (RCE) if a malicious file is uploaded.