EIP-2026-107684

This PHP script exploits a file upload vulnerability in Hustoj's FCKeditor component by bypassing extension checks to upload a malicious PHP file. It then provides a remote shell by sending base64-encoded commands via HTTP headers.