EIP-2026-110875

This exploit leverages an arbitrary file upload vulnerability in PHP-Nuke 8.3 by bypassing input sanitization to upload a malicious file disguised as a GIF. The script uses cURL to send the file to the vulnerable endpoint and retrieves the uploaded path.