EIP-2026-110048

This Perl script exploits an arbitrary file upload vulnerability in OneOrZero 1.6.* via the 'tinfo.php' script, allowing an attacker to upload a malicious PHP shell. It bruteforces the uploaded shell's filename due to timestamp-based naming and then uploads a secondary shell for persistent access.