EIP-2026-107337

This exploit demonstrates an arbitrary file upload vulnerability in Gallery Server Pro 2.6.1 and prior, allowing attackers to upload malicious files (e.g., ASPX) via a crafted multipart/form-data POST request. The vulnerability leverages path traversal to place the file in a predictable location for remote code execution.