EIP-2026-109361

This is a writeup describing an arbitrary file upload vulnerability in Maximus CMS 1.1.2 via the FCKeditor component. It explains how to exploit the vulnerability to upload malicious files, including remote shells, due to improper file extension checks.