EIP-2026-106454

This is a technical writeup detailing an arbitrary file upload vulnerability in Digitalus CMS 1.10.0 Alpha2. The vulnerability arises from improper file extension checks in the FCKeditor configuration, allowing attackers to upload malicious PHP files.