EIP-2026-112620

This exploit demonstrates an authenticated remote command execution (RCE) vulnerability in TextPattern CMS 4.8.7 by uploading a malicious PHP file via the file upload feature and executing arbitrary commands through a crafted GET request.