EIP-2026-110470

The exploit demonstrates a file upload vulnerability in Papoo CMS by crafting a malicious file with a valid GIF header followed by PHP code. This allows arbitrary code execution when the file is accessed.