EIP-2026-112914

The exploit demonstrates an upload vulnerability in Uploader by CeleronDude 5.3.0, allowing arbitrary file upload by renaming a shell to a .pjpeg extension. It also reveals a method to retrieve the admin password from an exposed settings.db file.