EIP-2026-112335

This exploit demonstrates an arbitrary file upload vulnerability in Software Index P30vel.ir, allowing attackers to bypass client-side file extension checks and upload malicious PHP files for remote code execution.