EIP-2026-109013

This PHP script exploits an arbitrary file upload vulnerability in KingMedia CMS versions 1.x to 4.1 by uploading a malicious file via a crafted POST request. The exploit uses cURL to send the file and extracts the uploaded file path from the response.