EIP-2026-110203

This exploit demonstrates a file upload vulnerability in Online Voting System 1.0, allowing authenticated users to upload a malicious PHP file disguised as an image, leading to remote code execution (RCE). The PoC includes a crafted HTTP POST request with a PHP payload that executes the 'whoami' command.