EIP-2026-113177

This exploit demonstrates an authenticated file upload vulnerability in Wallos < 1.11.2, allowing an attacker to bypass image upload restrictions by manipulating the Content-Type and prepending 'GIF89a' to a PHP webshell, resulting in remote code execution.