EIP-2026-111407

This exploit demonstrates an arbitrary file upload vulnerability in Poppy Web Interface Generator 0.8. It allows an attacker to upload a malicious PHP file (e.g., phpinfo.php) via a multipart/form-data POST request, leading to remote code execution (RCE).