EIP-2026-107207

This exploit demonstrates an SQL injection vulnerability in Free Arcade Script 1.0 to bypass authentication and gain admin access, followed by a file upload vulnerability to achieve remote code execution (RCE). The PoC provides clear steps for exploitation.