EIP-2026-110971

This JavaScript exploit targets a deserialization vulnerability in phpBB by uploading a malicious PHAR file via the plupload mechanism. It leverages a crafted payload to achieve remote code execution (RCE) by writing a PHP file to the server.