EIP-2026-109434

This PHP script exploits a file upload vulnerability in MetInfo 3.0's FCKeditor component, allowing arbitrary file upload by spoofing the file extension (e.g., .php.pdf) to bypass restrictions. It then provides a shell interface to execute commands on the target system via HTTP requests.