EIP-2026-113167

This exploit demonstrates a remote file upload vulnerability in w-Agora Forum 4.2.1 by bypassing content-type validation. It crafts a multipart/form-data POST request to upload a malicious PHP file disguised as an image, achieving remote code execution.