EIP-2026-110526

This exploit targets PCPIN Chat <= 5.0.4, leveraging SQL injection for authentication bypass and arbitrary file upload to achieve remote command execution. It uploads a malicious GIF file containing PHP code and includes it via a local file inclusion vulnerability.