EIP-2026-111746

This exploit demonstrates an unrestricted file upload vulnerability in Responsive E-Learning System 1.0, allowing an authenticated admin to upload a PHP reverse shell and achieve remote code execution (RCE). The attack leverages the student image upload functionality to bypass file type restrictions.