EIP-2026-108935

This exploit demonstrates a Remote Code Execution (RCE) vulnerability in Judging Management System v1.0 by chaining an authentication bypass (SQL injection) with an unrestricted file upload. It uploads a malicious PHP shell and triggers a reverse shell via PowerShell.