EIP-2026-109552

This Perl script exploits an arbitrary file upload vulnerability in the 'monalbum' web application to achieve remote code execution. It retrieves admin credentials from the configuration page, logs in, and uploads a malicious PHP shell disguised as an image file.