EIP-2026-109783

The exploit demonstrates an arbitrary file upload vulnerability in MyRoom due to inadequate security checks in PHP scripts. By manipulating the 'photo' parameter, an attacker can upload files to unintended locations, potentially leading to remote code execution.