EIP-2026-108541

This exploit demonstrates an arbitrary file upload vulnerability in Joomla Simple Photo Gallery. The vulnerable endpoint allows attackers to upload files to arbitrary locations via directory traversal in the 'jpath' parameter, leading to remote code execution.