EIP-2026-112910

This exploit demonstrates an arbitrary file upload vulnerability in Upload-Point 1.6 Beta, allowing an attacker to upload a malicious PHP shell (c.php) and execute it. The exploit is trivial, requiring no authentication, and provides direct steps to achieve remote code execution.