EIP-2026-109003

This is a technical writeup describing an arbitrary file upload vulnerability in KimWebsite's FCKeditor component. The vulnerability allows attackers to upload files to the '/userdata' directory via the 'upload.php' script, potentially leading to remote code execution.