EIP-2026-113046

This exploit demonstrates an unauthenticated RCE vulnerability in Vehicle Service Management System 1.0 by bypassing authentication via SQL injection and uploading a malicious PHP shell. The shell establishes a reverse connection to an attacker-controlled IP and port.