EIP-2026-105186

This is a functional Remote File Inclusion (RFI) exploit for AnoBBS 1.0.1, targeting the vulnerable $prog_dir parameter in bbs_auth.php. The exploit allows an attacker to include and execute arbitrary remote code by manipulating the parameter.