EIP-2026-107372

This exploit leverages an arbitrary file upload vulnerability in Geeklog's FCKeditor component, allowing attackers to upload malicious files (e.g., PHP shells) by bypassing file extension restrictions. The PoC provides clear steps to exploit the vulnerability via the file manager upload interface.