EIP-2026-106349

This exploit targets a file upload vulnerability in DaLogin 2.2 via FCKeditor, allowing arbitrary PHP file upload by bypassing extension checks. It uploads a malicious PHP shell disguised with multiple extensions and provides remote command execution.