EIP-2026-105797

This exploit demonstrates a remote file inclusion vulnerability in CF Image Hosting Script version 1.3.8. The vulnerability allows an attacker to include arbitrary remote files by manipulating the 'settings[SET_LANGUAGE]' parameter in the 'config.php' file.