EIP-2026-110726

This exploit demonstrates a file upload vulnerability in PHP Melody 1.5.3 by manipulating the Content-Type header to bypass image validation and upload a malicious PHP file. The PoC shows how to change the header from 'image/gif' to 'application/octet-stream' to upload a PHP shell.