EIP-2026-110921

This exploit targets a file upload vulnerability in phpATM <= 1.32 on Windows servers, bypassing a regex filter by appending a space to the filename (e.g., 'shell.php '). It uploads a PHP shell and allows remote command execution via a GET parameter.