EIP-2026-112054

This exploit demonstrates an arbitrary file upload vulnerability in Pixlr Image Editor 1.0.4, allowing attackers to upload and execute malicious PHP files on the server. The PoC uses cURL to send a crafted POST request to the vulnerable upload endpoint.