EIP-2026-113847

This exploit demonstrates an authenticated arbitrary PHP code execution vulnerability in JobScript by uploading a malicious PHP file via the '/admin-ajax.php' script. The exploit bypasses file extension restrictions and executes system commands through a crafted PHP script.