EIP-2026-108394

This is a writeup describing an upload vulnerability in a web-based property listing system. It explains how an attacker can bypass file extension checks to upload malicious scripts disguised as image files.