EIP-2026-107347

This exploit demonstrates SQL injection to bypass authentication and arbitrary file upload to achieve remote code execution (RCE) in Garbage Collection Management System 1.0. It creates an admin user and uploads a PHP web shell for command execution.