EIP-2026-108035

This PHP script exploits an arbitrary file upload vulnerability in JAKCMS PRO by leveraging a directory traversal technique in the 'catID' parameter to upload a malicious file ('lo.php') to a writable directory. The exploit uses cURL to send a POST request with the file data and manipulated path.