EIP-2026-111045

This exploit demonstrates a CSRF vulnerability in phpFileManager 0.9.8, allowing an attacker to create a backdoor shell via two POST requests. The first request creates a PHP file, and the second injects malicious code into it.