EIP-2026-107813

This exploit targets a file upload vulnerability in ImpressPages CMS versions 3.6, 3.5, and 3.1. It leverages improper verification in the 'manage()' function to upload a malicious PHP script, enabling remote code execution (RCE).