EIP-2026-111219

This exploit targets a file upload vulnerability in phpThumb, allowing arbitrary file uploads via improper file extension validation. It uploads a shell (r57.txt) and renames it to a PHP file for remote code execution.