EIP-2026-112944

This exploit demonstrates an arbitrary file upload vulnerability in Vacation Rental Script <= 4.0, allowing authenticated users to upload malicious PHP files disguised as images. The PoC provides step-by-step instructions to achieve remote code execution (RCE).