EIP-2026-111265

This exploit demonstrates a file upload vulnerability in PhreeBooks ERP 5.2.4/5.2.5, allowing an authenticated attacker to upload a malicious PHP file via the backup functionality, leading to remote command execution.