EIP-2026-112708

This HTML form demonstrates an arbitrary file upload vulnerability in TinyCMS 1.3, allowing an attacker to upload malicious content to the server via a crafted POST request to 'functions.php'. The exploit leverages improper input validation to achieve remote code execution (RCE) by uploading a malicious page.