EIP-2026-106477

This exploit targets a file upload vulnerability in DM Filemanager (fckeditor) version 3.9.11, allowing arbitrary PHP file upload by bypassing extension checks. It uploads a malicious PHP file with a double extension and provides a remote shell.