EIP-2026-111831

This exploit targets RunCMS <= 1.6.3 by leveraging a file upload vulnerability in FCKEditor to inject a PHP shell. It authenticates with provided credentials, uploads a malicious file with a double extension, and executes arbitrary commands via a GET parameter.