EIP-2026-111960

This exploit targets a file upload vulnerability in Seagull PHP Framework <= 0.6.4 via the FCKeditor component. It bypasses extension checks by using a double extension (e.g., .php.php4) and uploads a malicious PHP file, enabling remote command execution.