EIP-2026-111597

This exploit demonstrates an arbitrary file upload vulnerability in PWP Wiki Processor 1.5.1, allowing attackers to upload a malicious PHP shell disguised as a .flv file via the 'upload/UploadList' endpoint, leading to remote code execution.