EIP-2026-110397

This exploit demonstrates an arbitrary file upload vulnerability in OSSIM 2.1.5, allowing attackers to upload malicious PHP files via the 'repository_attachment.php' script. Path traversal can be used to place the file in a web-accessible directory, leading to remote code execution.