EIP-2026-110221

This exploit demonstrates multiple vulnerabilities in Open Auto Classifieds <= 1.5.9, including SQL injection, insecure file upload leading to RCE, and XSS. The PoC includes a bash script to automate user registration, login, and upload of a malicious PHP file disguised as an image.