EIP-2026-114507

This PoC exploits a file upload vulnerability in YaPiG 0.92b by injecting PHP code into a comment field, allowing remote code execution via a crafted webshell. It demonstrates the vulnerability by creating a malicious PHP file and executing commands on the server.