EIP-2026-113329

The exploit demonstrates a remote command execution vulnerability in multiple WebmasterSite products by uploading a malicious avatar file containing PHP code. The attacker can then trigger the execution of arbitrary commands via a crafted URL.