EIP-2026-112049

This exploit demonstrates an authentication bypass and file upload vulnerability in SilverStripe CMS 2.4.0, allowing an attacker to upload a malicious PHP file disguised as an image and rename it to execute arbitrary commands.