EIP-2026-114647

This exploit demonstrates a file upload vulnerability in Zoopeer 0.1 & 0.2 via the FCKeditor component, allowing an attacker to upload a malicious PHP shell by renaming it with a .php4 extension. The exploit leverages a misconfiguration in the file manager to bypass restrictions.