EIP-2026-106039

This PHP script exploits a file upload vulnerability in cmsWorks 2.2 RC4 by bypassing extension checks in the FCKeditor component, allowing arbitrary PHP code execution. It uploads a malicious file with a double extension (e.g., .php.zip) and provides a shell interface for command execution.