EIP-2026-108693

This exploit describes a remote file upload vulnerability in jDownloads 1.0, allowing attackers to upload malicious files (e.g., shell.php.jpg) by bypassing file extension restrictions. The exploit requires user registration and leverages the 'Submit file' functionality to achieve remote code execution (RCE).