EIP-2026-109165

This exploit leverages an unauthenticated file upload vulnerability in LionWiki 3.X via the `index.php?action=upload` endpoint, allowing an attacker to upload a malicious shell. The exploit is trivial but requires no authentication unless an admin password is set.