EIP-2026-104978

The exploit describes a remote file inclusion vulnerability in Advanced GuestBook for phpBB 2.3.1 due to improper input sanitization. An attacker can include arbitrary remote PHP files via the 'include_path' parameter in admin.php.