EIP-2026-107960

This exploit targets iScripts EasyCreate 3.0, leveraging an authenticated arbitrary PHP code execution vulnerability via improper file upload verification in '/ajax_image_upload.php'. It uploads a malicious PHP script with a '.php4' extension to bypass '.htaccess' restrictions and achieves remote command execution.