EIP-2026-107788

This exploit targets an unrestricted file upload vulnerability in imacs CMS version 0.3.0, allowing an attacker to upload a malicious PHP file and execute arbitrary commands via a reverse shell. The exploit leverages a lack of authentication and improper file extension checks in the `/src/assets/mng/mng.php` endpoint.