EIP-2026-110352

This is a writeup describing a file upload vulnerability in osCMax 2.0 due to incomplete extension filtering in FCKeditor. The exploit suggests uploading files with extensions like .php3, which are not blocked by the default configuration.