EIP-2026-110632

This exploit abuses the PHP_SESSION_UPLOAD_PROGRESS feature in PHP 7.3.15-3 to inject malicious session data, triggering a race condition that leads to remote code execution via a reverse shell. The script uses multithreading to repeatedly send crafted POST requests with a malicious payload.