EIP-2026-105725

This exploit targets an arbitrary file upload vulnerability in cardinalCms 1.2 via the FCKeditor component. It uploads a malicious PHP shell disguised as an image file and provides a remote command execution interface.