EIP-2026-109613

This exploit demonstrates a remote file upload vulnerability in MRCGIGUY Thumbnail Gallery Post 1b, allowing an attacker to upload a malicious PHP shell by bypassing image upload restrictions. The exploit is trivial and relies on the application's failure to validate file extensions properly.