EIP-2026-110194

This exploit demonstrates an unauthenticated remote code execution (RCE) vulnerability in Online Traffic Offense Management System 1.0 via arbitrary file upload. The PoC shows how an attacker can upload a malicious PHP file disguised as an image, which is then executed on the server.