EIP-2026-105335

This exploit demonstrates a Remote File Include (RFI) vulnerability in aWebNews 1.0, allowing an attacker to include and execute arbitrary remote files by manipulating the 'path_to_news' parameter in 'visview.php'. The vulnerability arises from insecure file inclusion practices in PHP.