EIP-2026-108960

This exploit demonstrates SQL injection vulnerabilities and an arbitrary file upload vulnerability in KaiBB 2.0.1. The SQLi vectors are in multiple parameters, and the file upload allows executing shell code disguised as an avatar image.