EIP-2026-108672

This PHP script exploits an arbitrary file upload vulnerability in the hwdVideoShare Joomla! component (r805) by uploading a malicious file with a .vob extension and then brute-forcing the uploaded filename to locate it. The exploit leverages cURL to bypass inadequate input sanitization.