EIP-2026-108304

The exploit demonstrates an arbitrary file upload vulnerability in the cgTestimonial 2.2 Joomla component, allowing unauthenticated attackers to upload a malicious PHP shell via the 'usr_img' parameter. The PoC includes a Perl script that automates the upload and execution of a PHP shell, enabling remote code execution (RCE).