EIP-2026-109030

This PHP script exploits a file upload vulnerability in Knowledgeroot's FCKeditor component, allowing arbitrary file uploads with malicious PHP code due to improper extension validation. It uploads a shell and provides interactive command execution.