EIP-2026-111611

This Metasploit module exploits an arbitrary PHP file upload vulnerability in qdPM v7 via the user profile photo upload feature, allowing remote code execution. It supports both PHP and Linux payloads and requires valid credentials for authentication.