EIP-2026-110308

This exploit demonstrates an arbitrary file write vulnerability in OpenForum Server 2.2 b005 by uploading a malicious .sjs file that leverages the saveAsAttachment method to write to the server's filesystem. The PoC uses a multipart form data request to create a file in the root directory.