EIP-2026-109003

PRE-CVE

Kim Websites 1.0 - 'FCKeditor' Arbitrary File Upload

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-109003. PoCs published by Ciph3r.

AI-analyzed exploit summary This is a technical writeup describing an arbitrary file upload vulnerability in KimWebsite's FCKeditor component. The vulnerability allows attackers to upload files to the '/userdata' directory via the 'upload.php' script, potentially leading to remote code execution.

Description

Kim Websites 1.0 - 'FCKeditor' Arbitrary File Upload

Exploits (1)

exploitdb WRITEUP VERIFIED
by Ciph3r · textwebappsphp
https://www.exploit-db.com/exploits/6410

This is a technical writeup describing an arbitrary file upload vulnerability in KimWebsite's FCKeditor component. The vulnerability allows attackers to upload files to the '/userdata' directory via the 'upload.php' script, potentially leading to remote code execution.

Classification
Writeup 80%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: KimWebsite (FCKeditor)
No auth needed
Prerequisites: Access to the vulnerable FCKeditor upload endpoint
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026