EIP-2026-105366

This exploit targets a file inclusion vulnerability in BaBB 2.8 by injecting a malicious PHP include statement via the 'antworten.php' endpoint. It allows remote code execution by including an arbitrary file from an attacker-controlled server.