EIP-2026-111084

This exploit demonstrates a remote arbitrary file upload vulnerability in PHPizabi v0.848b C1 HFP1-3, allowing attackers to upload and execute malicious PHP code by bypassing file extension checks and leveraging directory listing to locate the uploaded file.