EIP-2026-108515

This PHP script exploits an arbitrary file upload vulnerability in the RokDownloads component for Joomla! by sending a malicious file via a POST request to the vulnerable endpoint. The lack of input sanitization allows an attacker to upload a file with a malicious payload, potentially leading to remote code execution.