EIP-2026-112913

This exploit leverages a file upload vulnerability in Uploader by CeleronDude 5.3.0, allowing attackers to bypass file extension restrictions by renaming a malicious PHP file to have a .pjpeg extension, leading to remote code execution (RCE). The vulnerability is trivial to exploit and requires no authentication.