EIP-2026-110186

This exploit demonstrates an unauthenticated arbitrary file upload vulnerability in Online Student Enrollment System 1.0, allowing remote code execution via a maliciously crafted PHP file. The PoC includes a CSRF form to exploit the vulnerability.