EIP-2026-112190

This exploit demonstrates an authenticated arbitrary file upload vulnerability in SiteMagic CMS 4.4.2. It allows an attacker to upload a malicious PHP file by sending a crafted multipart/form-data POST request, leading to remote code execution.