EIP-2026-110737

This is a vulnerability writeup detailing an arbitrary file upload flaw in PEAR HTTP_Upload v1.0.0b3, where attackers can bypass file extension checks by appending '.1' to PHP files, leading to remote code execution. The advisory includes technical details, affected versions, and proof-of-concept examples.