EIP-2026-107965

This exploit demonstrates an arbitrary file upload vulnerability in iScripts SocialWare 2.2.x by bypassing content-type and file extension checks to upload a malicious PHP shell. It authenticates with provided credentials and uploads a file with a .php5 extension to execute arbitrary commands.