EIP-2026-110656

This exploit targets a file upload vulnerability in PHP Booking Calendar 10d's FCKeditor component, allowing arbitrary file uploads by bypassing extension checks. It uploads a malicious PHP shell and provides interactive command execution.