EIP-2026-110388

This exploit demonstrates a remote file upload vulnerability in OsCSS 1.2, allowing an attacker to upload a malicious file via a crafted HTML form targeting the admin/categories.php endpoint. The exploit bypasses authentication and directly uploads a shell, enabling remote code execution.