EIP-2026-112651

This PHP script exploits multiple vulnerabilities in Thelia 1.3.5, including command validation bypass, remote code execution via file upload, and arbitrary file upload. It uses a custom HTTP client class to interact with the target application.