EIP-2026-113365

This exploit targets webSPELL <= 4.01.02, leveraging a file upload vulnerability and blind SQL injection to achieve remote code execution. It requires register_globals=On and exploits improper file upload handling and SQL injection in the members.php file.