EIP-2026-113791

This Perl script exploits an arbitrary file upload vulnerability in the Global Flash Gallery WordPress plugin by bypassing file extension validation. It sends a POST request with a malicious file disguised as an image (file.php.gif) to swfupload.php, potentially leading to remote code execution.