EIP-2026-107674

This exploit demonstrates an unauthenticated file upload vulnerability in Human Resource Information System 0.1, allowing remote code execution via a malicious PHP shell upload. The script uploads a shell, locates it, and provides interactive command execution.