EIP-2026-113302

This PHP script exploits an unrestricted file upload vulnerability in WeBid 1.1.1 by uploading a malicious PHP shell via a multipart/form-data POST request to /ajax.php. The shell allows remote command execution via HTTP headers.