EIP-2026-112561

This exploit demonstrates an unrestricted file upload vulnerability in Task Management System 1.0, allowing an authenticated attacker to upload a malicious PHP file (or a PHP payload embedded in an image) and achieve remote code execution by accessing the uploaded file.