EIP-2026-105686

The exploit demonstrates a remote file inclusion vulnerability in Cafelog's 'blogger-2-b2.php' and 'gm-2-b2.php' scripts due to insufficient sanitization of user-supplied input. An attacker can include a malicious PHP file via the 'b2inc' parameter, leading to remote code execution with web server privileges.