EIP-2026-110136

This exploit demonstrates an unauthenticated arbitrary file upload vulnerability in Online Leave Management System 1.0, leveraging SQL injection for authentication bypass and uploading a PHP reverse shell. The payload executes a reverse shell to a specified attacker IP and port.