EIP-2026-107223

This PHP script exploits an arbitrary file upload vulnerability in FreeCMS.us 0.2 via the FCKeditor component. It uploads a malicious PHP shell disguised as an image file and provides interactive command execution.